Knowledge Base

How to Generate a CSR on Microsoft IIS 7.x

• Click Start.
• Select Administrative Tools.
• Start Internet Services Manager.
• Click Server Name.
• From the center menu, double-click the 'Server Certificates' button in the 'Security' section.

• Select 'Actions' menu (on the right), click on 'Create Certificate Request.'

• This will open the Request Certificate wizard.

• In the 'Distinguished Name Properties' window, enter the information as follows:
• Common Name: Enter the FULL domain name (for wildcard certificates the common name should contain an asterisk (e.g. *.sectigo.com)
• Organization and Organization Unit: these are your company name and department respectively.
• City/Locality
• State/Province
• Country/Region
• Click Next.
• In the 'Cryptographic Service Provider Properties' window
  • Leave Cryptographic Service provider Default (Microsoft RSA SChannel Cryptographic Provider)
  • Change the Bit Length to (2048) 
  • Click Next.

• Enter a filename and location to save your CSR. You will need this CSR to enroll for your IIS SSL Certificate.

• Click Finish.
• Your new CSR is now contained within the file c:\\certreq.txt
• When you make your application, make sure you include the CSR in its entirety into the appropriate section of the enrollment form - including

• Click Next
• Confirm your details in the enrollment form
• Finish

To save your private key:

• Go to: Certificates snap in in the MMC
• Select Requests
• Select All tasks
• Select Export

We recommend that you make a note of your password and backup your key as these are known only to you, so if you loose them we can't help!
A floppy diskette or other removable media is recommended for your backup files.
* please note that this last step is not required but is recommended if you intend to make any changes to the site**.