Generate a Certificate Signing Request (CSR): Windows IIS (All Versions)

Generate a Certificate Signing Request (CSR) - IIS 4

  1. Run the Management Console.
  2. Expand the Internet Information Server, as well as the computer name you are securing.
  3. Right-click on the website you are securing, and select Properties.
  4. Open Directory Security.
  5. Under Secure Communications, click on Key Manager and 'Create New Key'.
  6. Select 'Put the request in a file...', and select a filename or accept the default.
  7. Fill in the required information with your company information.
  8. Click on Next until your are done, then click on Finish. Choose 'yes' when you are prompted about saving changes.
  9. Finally, open the CSR you created with a text editor such as notepad, and copy and paste the text (including the BEGIN and END tags) into the DOMAINScanada.ca web-CSR-form.

 

Generate a Certificate Signing Request (CSR) - IIS 5-6

1. Run Internet Information Services found in Control Panel → Administrator Tools.

CSR-IIS5-6

 

2. Right-click on the website you want to generate a CSR for, and select Properties. Click on the Directory Security tab, and then click on the 'Server Certificate' button.

 

3. Click 'next' and click the 'Create a new certificate' radio button and then click next again.

 

4. Click the 'Prepare the request now, but send it later' radio button and click next.

csr-IIS4.gif

 

5. Enter a name for the certificate and select a bit-length of 2048. Typically you can leave the other boxes un-checked.

csr-IIS5.gif

csr-IIS3.gif

csr-IIS2.gif

 

6. For Organization enter the exact full legal name of your organization. Enter the organization unit (eg: IT, Security, Marketing, etc).

csr-IIS6.gif

 

7. Enter the Fully Qualified Domain Name (FQDN) for the common name. This must be an exact match of the address you are securing.

csr-IIS7.gif

 

8. Enter the geographical information where your organization is legally located.

csr-IIS8.gif

 

9. Browse a location to save your SSL Certificate Signing Request (CSR) as a text file (.txt).

csr-IIS9.gif

 

10. Finanlly click 'Next' to generate the CSR file.

csr-IIS10.gif

 

* NOTE * - Completing the steps above will result in a "pending request" on your website. Once the SSL Certificate has been issued, it is important that it is installed to this exact pending request or the certificate will not be functional. 

 

Generate a Certificate Signing Request (CSR) - IIS 7

1. Run Internet Information Services found in Control Panel → Administrator Tools.

 

2. Click on the website you want to generate a CSR for.

 

3. In the middle window, double-click on 'Server Certificates' in the 'Security' section.

iis7-csr-1.gif

 

4. In the right side 'Actions' menu, click on 'Create Certificate Request'. 

iis7-csr-2.gif

 

5. In the 'Distinguished Name Properties' window, enter the following information:

Common Name - The fully qualified domain name for your web server. This must be an exact match (eg: www.example.com).

Organization - The exact legal name of your organization. Do not abbreviate your organization name (eg: DOMAINScanada.ca Inc.).

Organizational unit - Section of the organization (eg: IT, Security, Marketing).

City/locality - The city where your organization is legally located.

State/province - The state or province where your organization is legally located. Can not be abbreviated.

Country/region - The two-letter ISO abbreviation for your country (eg: CA, US).

iis7-csr-3.gif

 

6. Click Next.

 

7. In the 'Cryptographic Service Provider Properties' window, the default settings (Microsoft RSA SChannel and 2048) are the recommended values.

iis7-csr-4.gif

 

8. Browse a location to save your SSL Certificate Signing Request (CSR) as a text file (.txt).

iis7-csr-5.gif

  • 82 Users Found This Useful
Was this answer helpful?

Related Articles

Improved Guidelines for Issuance of SAN SSL Certificates

Certificate Authorities (CA’s) will not issue SSL certificates with an expiry date later...

Installing an SSL Certificate: Linux Apache

1. Upload the ssl certificate files to your preferred location on the apache server. Make the...

Installing an SSL Certificate: Windows IIS (All Versions)

Installing an SSL Certificate IIS 5 & 6 1. Open the IIS management console and select the...

Installing an SSL Certificate: Exchange 2010

1. Place a copy of your ssl certificate on your exchange server.2. Open the Exchange 2010...

Backup, Export or Import an SSL Certificate: IIS and Exchange

Exporting an SSL Certificate IIS 71. Open the IIS 7 management console and select the server name...