How do i get Edge to trust our internal Certificate Authority

BlakeDrumm 

i had the same problem with edge and chrome but not internet explorer .

here what i did to solve it :

1) On the destination server that need the certificate , launch mmc

2) add certificate => loalhost

3) Create custom Request => Proceed without enrollment policy => No template & PKCS#10

General Tab: 

4)  Frindly name : certificateWebServer

     full : Common Name( "FDQN") ,email, country, Locality,Organization, Organization unit

5) in alternatif name , chose DNS and enter the same as Common Name( "FDQN")

6) in Extension tab => Key usage :

 CRL Signing,Data enciperment,Decipher only,Digital signature, Encipher only

    in Extension tab => Extended Key usage :

server authentificcation

clientauthentificcation

In private Key : 

4096 and activate "Make private key exportable"

7) go on your PKI server (eg: http://myPki.lan/certsrv ) paste the request

😎 dowload .cer and install it.

test 🙂