I'm not a DBA by trade. My organization doesn't have a dedicated DBA, we have to just figure things out. I have a SQL Server 2012 Enterprise installed on a Sever 2012 R2 OS. It is a not in a SQL cluster. The server is a virtual machine. I've been asked to encrypt the connection for the SQL server, as described here: https://msdn.microsoft.com/en-us/library/ms191192(v=sql.110).aspx
I don't have any problems until I get to selecting the certificate. The certificate does not display. It's loaded properly in the MMC certificate plug in. Before posting here, I've looked at numerous links. I was going to post a few of them, but I don't have enough reputation points. Here is one I looked at: https://www.experts-exchange.com/questions/27860135/SSL-cert-not-showing-up-in-SQL-Server-2008-Configuration-Manager.html
The Engine and Sql Agent services do run as domain accounts. I've logged in as the engine account and added the certificate to the user account's personal store. I've also given both domain accounts full control to the private key. I've restarted the sql engine, sql browser and sql agent services. I've restarted the server. It still doesn't show up under Protocols for MSSQLSERVER > Properties > Certificate tab.
As for creating the certificate request. I created the certificate request on the database server. I used the MMC snapin for certificates (local computer). I right clicked Personal > All Tasks > Advanced Operations > Create Custom Request. The friendly name is the servers host name (not FQDN). For the subject name, I used the Common name. Key usage options I selected were CRL Signing, Decipher only, Encipher only, Key agreement, Key encipherment. And I selected "Make these key usages critical". For Extended Key Usage, I selected Server Authentication and Client Authentication. I did NOT select "Make the Extended key usage critical". Basic constraints are enabled but left blank. I selected "Make the basic constraints extension critical". The private key is RSA, 2048-bit. Private key is exportable. Hash algorithm is SHA512.
Any help is greatly appreciated.