.. _generate-cert-for-app-reg:

Generate a certificate for application registration
-----------------------------------------------------

.. _24.1|VOSS-1265:

:bdg-primary:`Microsoft`



.. tip:: 

   :ref:`use-action-search-to-navigate-automate`


This procedure generates a certificate in Automate that you can use for application registration for 
Microsoft tenants. 

1. Go to the **Certificates** page. 
2. Select the relevant Customer hierarchy. 
3. Click the Plus icon (+) to add a new certificate. 
4. On the **Certificate Management > New Record** page, fill out at least the mandatory fields: 

   * Fill out a name and a description for this certificate. 
   * Fill out certificate details, including a common name, which must match the host being authenticated.

   .. image:: /src/images/generate-certificate.png 

5. Save your changes to create the new certificate. A number of fields are auto-populated when the 
   certificate is generated. The image shows an example: 

   .. image:: /src/images/generate-certificate-saved.png 

6. Once the transaction completes, view your new certificate in the list view of the **Certificates** page. 
7. Select the certificate, then, from the toolbar overflow menu, select **Export Public Key**, and 
   save the exported file to your local computer or to a network location. 
8. Upload the certificate you saved, to Microsoft Entra.  

   * The certificate file will now be available for selection on the tenant, and will automatically 
     populate the tenant **Certificate Thumbprint** field once you select the certificate. See 
     *Configure Microsoft Tenant Connection Parameters* in the Core Feature Guide
   * When saving the tenant with the selected certificate, Automate pushes the certificate to the Windows PowerShell 
     proxy. You can verify that the certificate has been added to the PowerShell proxy. 

     .. image:: /src/images/generate-cert-pushed.png