To make a certificate available to a Horizon 7 server, you must create a configuration file, generate a certificate signing request (CSR) from the configuration file, and send the signing request to a CA. When the CA returns the certificate, you must import the signed certificate into the Windows local computer certificate store on the Horizon 7 server host, where it joins the previously generated private key.
A CSR can be generated in several ways, depending on how the certificate itself will be generated.
The Microsoft certreq utility is available on Windows Server 2008 R2 and can be used to generate a CSR and import a signed certificate. If you intend to send a request to a third-party CA, using certreq is the quickest and simplest way to obtain a certificate for Horizon 7.