I'm using openssl on linux to generate a certificate signing request (CSR) that will be submitted to a Windows Certificate Services Certification Authority that has been configured to archive private keys.
Unfortunately, I can't figure out how to use openssl to generate a CSR that includes the private key so that the CA can both issue my cert and archive the private key.
Edit: Based on this Microsoft Documentation, it looks like what I'm trying to do is generate a CSR using the CMC format, which is what allows the private key to "go along" with the request for archival.
From that link:
One of the formats the certificate request uses is the CMC format for certificate requests, which supports an optional encrypted data payload. This is the format required for certificate requests with private key archival. Technically, any client that supports the CMC protocol may enroll with an Enterprise CA and request that the private key be archived by the CA.
Yet More Findings: