Smart card logon with third-party certification authorities

Hi all,

I wat to use smart card logon based on certificates from third party. No CA is in my Active directory environment. Following thos articles.

http://support.microsoft.com/kb/281245

http://social.technet.microsoft.com/wiki/contents/articles/3824.updated-requirements-for-a-windows-server-2008-r2-domain-controller-certificate-from-a-3rd-party-ca.aspx

In what way should I genereate CSR file for my domain controller?

http://support.microsoft.com/kb/291010

If I use MMC/Certificates and create "Custom request" there is no option to fill Certificate Template Name - DomainController.

"The certificate template must have an extension with the BMP data value "DomainController".

What's the best way to create .csr for my domain controller?