To request an OCSP certificate:

1. Select the Windows Start icon, type MMC  in Run, and select OK.
2. In the console, press Ctrl + M (or select File > Add /Remove Snap In).
3. In the left panel, select Certificates, Add, and select OK.
4. In the left panel, expand Certificates, expand Personal.
5. Right-click on Certificates and select All Tasks > Request New Certificate.
6. At Before You Begin, select Next.
7. At Select Certificate Enrollment Policy, select Next.
8. At Request Certificates, tick the OCSP certificate and select Enroll.
9. When status Succeeded is displayed, select Finish.

The OCSP certificate should be listed.

Give the network service permission to the OCSP certificate.

1. Right-click on the OCSP certificate, select All Tasks > Manage Private Keys.
2. Select Add.
3. Type Network Service, select Check Names, and select OK.
4. Select OK.