Generate an SSL certificate for the Proxmox web interface
Create a key and a SAN certificate request with OpenSSL, have it signed by your CA, and install the certificate in the Proxmox VE web interface.
Notes on security leadership, infrastructure and architecture
Create a key and a SAN certificate request with OpenSSL, have it signed by your CA, and install the certificate in the Proxmox VE web interface.
Create a certificate request that covers several DNS names and IP addresses with an OpenSSL configuration file, then convert the signed certificate to PFX for Windows.
An internal CA rejects a request with 0x80094001. The usual cause is a country name written out in full instead of its two-letter ISO 3166 code.
certutil -config - -ping lists the enterprise CAs published in Active Directory and checks that the one you pick is responding.