How to Generate a CSR for Microsoft IIS 7 Print

  • CSR, SSL, IIS, Windows, Server, SSL Certificate, windows hosting, server security
  • 2

1. Open Internet Information Services (IIS) Manager

Click Start, Control Panel, Administrative Tools, and then select Internet Information Services (IIS) Manager.

2. Select the server where you want to generate the certificate

In the left Connections menu, select the server name (host) where you want to generate the request.

3. Navigate to Server Certificates

In the center menu, click the Server Certificates icon under the Security section near the bottom.

MS IIS7 Step3

4. Select Create a New Certificate

In the right Actions menu, click Create Certificate Request.

MS IIS7 Step4

5. Enter your CSR details

In the Distinguished Name Properties window, enter in the required CSR details and then click Next.

MS IIS7 Step5

Note: To avoid common mistakes when filling out your CSR details, reference our Overview of Certificate Signing Request article.

6. Select a cryptographic service provider and bit length

In the Cryptographic Service Provider Properties window, select Microsoft RSA SChannel Cryptographic Provider and Bit Length of 2048, then click Next.

MS IIS7 Step6

Note: Bit Length: 2048 is the current industry standard. You may choose a larger key size, but only if you have a requirement to do so, as longer key lengths increase latency and may reduce compatibility.

7. Save the CSR

Click Browse to specify the location where you want to save the CSR as a “.txt” file and click Finish.

MS IIS7 Step7

8. Generate the order

Locate and open the newly created CSR from the specified location you choose in a text editor such as Notepad and copy all the text including:

-----BEGIN CERTIFICATE REQUEST-----
And
-----END CERTIFICATE REQUEST-----

MS IIS7 Step8

Return to the Generation Form on our website and paste the entire CSR into the blank text box and continue with completing the generation process.

Upon generating your CSR, your order will enter the validation process with the issuing Certificate Authority (CA) and require the certificate requester to complete some form of validation depending on the certificate purchased.


Was this answer helpful?

« Back