How to issue with approval a certificate without its private key and import it on the same computer

Here are the main guidelines with explicit examples.
For more information about a particular step, follow the links.

Use the policy file to create an encoded request file.

certreq -new C:TempServer_RequestPolicy.inf C:TempServer_CertificateRequest.req

Submit the request file to the Certificate Authority.
```
certreq -submit -attrib "CertificateTemplate:WebServer" C:TempMyServer_CertificateRequest.req
```
In return you will get a Request ID number.

More about certreq -submit.
Go to the Certificate Authority console and approve the pending request.
Come back to the computer where you submitted the request and download the certificate with the Request ID you got at step 3.
```
certreq -retrieve 17877  C:TempServerCertificate.cer
```
More about certreq retrieve.
Import the certificate into your store.
```
certutil -addstore -user -f "My" C:TempServerCertificate.cer
```
More about the certutil -addstore.