Redirecting you to
Tech Document Sep 26, 2018

How to Generate Certificate Signing Request on Microsoft IIS 8.x

This article goes in to detail on how to generate a CSR on Microsoft IIS 8.x.

  1. From the Start screen, click or search for Internet Information Services (IIS) Manager and open it.
  2. Click on the server name.
  3. From the center menu, double-click the "Server Certificates" button in the "IIS" section (it is in the middle of the menu).IIS 8 Security Certificates
  4. Next, from the "Actions" menu (on the right), click on "Create Certificate Request..." This will open the Request Certificate wizard.IIS 8 Create Certificate Request
  5. In the "Distinguished Name Properties" window, enter the information as follows:

    Common Name - The name through which the certificate will be accessed (usually the fully-qualified domain name, e.g., or

    Organization - The legally registered name of your organization/company.

    Organizational unit - The name of your department within the organization (frequently this entry will be listed as "IT," "Web Security," or is simply left blank).

    City/locality - The city in which your organization is located.

    State/province - The state in which your organization is located.

    Country/region - If needed, you can find your two-digit country code in our list.

    IIS 8 Distinguished Name Properties
  6. Click Next.
  7. In the "Cryptographic Service Provider Properties" window, enter the following information and then, click Next:

    Cryptographic service provider - In the drop-down list, select Microsoft RSA SChannel..., unless you have a specific cryptographic provider.
    Bit length - In the drop-down list, select 2048 (or higher).

    IIS 8 Cryptographic Service Provider Properties
  8. Click the ... box to browse to a location where you want to save the CSR file. If you just enter a filename without browsing to a location, your CSR will end up in C:\Windows\System32.

    Remember the filename that you choose and the location to which you save it. You will need to open this file as a text file and copy the entire body of it (including the Begin and End Certificate Request tags) into the online order process when prompted.

    IIS 8 CSR Pending Request Filename