Redirecting you to
Tech Document Sep 26, 2018

How to Generate Certificate Signing Request on Microsoft IIS 5.x / 6.x

This article goes into detail on how to generate certificate signing request on Microsoft IIS 5.x / 6.x.

  • Select Administrative Tools
  • Start Internet Services Manager
Microsoft IIS 5.x / 6.x
  • Open the properties window for the website the CSR is for. You can do this by right clicking on the Default Website and selecting Properties from the menu
  • Open Directory Security by right clicking on the Directory Security tab
Microsoft IIS 5.x / 6.x Web Site Properties
  • Click Server Certificate. The following Wizard will appear:
IIS 5 x Server Certificate
  • Click Create a new certificate and click Next.

Note: If you do not see the above screenshot, you probably already have an SSL Certificate on the website you're using. Please follow these on how to create CSRwithout removing the current certificate.

SSL Certificate Immediate Request - IIS 5 x
  • Select Prepare the request and click Next.
SSL Security Settings
  • Provide a name for the certificate, this needs to be easily identifiable if you are working with multiple domains. This is for your records only.
  • For Bit length please use 2048 and then Click Next
IIS 5x Organization Information
  • Enter Organisation and Organisation Unit, these are your company name and department respectively. Click Next.
IIS 5x Qualified Domain Name
  • The Common Name field should be the Fully Qualified Domain Name (FQDN) or the web address for which you plan to use your IIS SSL Certificate, e.g. the area of your site you wish customers to connect to using SSL.
  • Click Next. once you have entered the common name.
SSL Geographical information
  • Enter your country, state and city. Click Next.
SSL Certificate Request
  • Enter a filename and location to save your CSR. You will need this CSR to enroll for your IIS SSL Certificate. Click Next.
SSL Request File Summary
  • Check the details you have entered. If you have made a mistake click Back and amend the details. Be especially sure to check the domain name the Certificate is to be "Issued To". Your IIS SSL Certificate will only work on this domain. Click Next when you are happy the details are absolutely correct.
  • When you make your application, make sure you include the CSR in its entirety into the appropriate section of the enrollment form - including
  • Click Next
  • Confirm your details in the enrollment form
  • Finish

To save your private key:

  • Go to: Certificates snap in in the MMC
  • Select Requests
  • Select All tasks
  • Select Export

We recommend that you make a note of your password and backup your key as these are known only to you, so if you loose them we can't help! A floppy diskette or other removable media is recommended for your backup files.