Home Wiki CSR / SSL generation How To Generate CSR on IIS 10.x

How To Generate CSR on IIS 10.x

IIS (Internet Information Services) is a set of services designed to implement a web server in the Windows operating system with support for HTML sites and ASP.NET or ASP applications. Here is a complete guide on how to Generate CSR and Private keys on IIS 10.x.
Actually, the process is more or less the same as that was done on IIS 7 and IIS 8. We recommend that you write down your password and backup your key because, in case of loss, they cannot be restored, and we will not be able to help you. Any storage is recommended for saving your backup files.

- 1
  STEP 1
  
  Follow the below steps to create the CSR code in Microsoft Server 2016 using IIS 10 or 10.5.
  1. First, go to the Start Menu and search for ‘Internet Information Services (IIS) Manager.’ The Internet Information Services (IIS) Manager will be on your screen;
  2. Click on the server name located in the left pane under;
  3. Now go to the IIS section in the middle pane and double-click on Server Certificates.;
- 2
  
  STEP 2
  
  There is the "Actions" section on the right side, in which you need to click on "Create Certificate Request."
- 3
  STEP 3
  
  This will open the Certificate Request Form Wizard. In the Distinguished Name Properties window, enter the following information:
  1. The Common Name field should contain the Fully Qualified Domain Name (FQDN) - the web address for which you plan to use the IIS SSL certificate. You must be sure that the Common name that you have verified with CSR is the correct domain name / FQDN for which you are going to use the certificate. For a Wildcard SSL certificate, the Common Name must contain at least one asterisk (*) For example: * .domain.tld, * .sub.domain.tld
  2. Enter the Organization (company name) and the Organization Unit;
  3. Enter the location of the company: country, city, region;
  4. Click Next.
- 4
  
  STEP 4
  
  In the "Cryptographic Service Provider Properties" window, leave both settings as default (Microsoft RSA SChannel and 2048) and then click Next.
- 5
  STEP 5
  - Enter the file name and location to save your CSR file. You will need this CSR to register your IIS SSL certificate;
  - Click Finish;
  - Your new CSR is contained in \Desktop\cert_req.txt
- 6
  To save the private key:
  1. Go to: Certificates in the MMC snap-in;
  2. Select Requests;
  3. Select All tasks;
  4. Select Export;
- *
  
  Hints!
  
  Please be sure that you have inserted the entire CSR into the SSL Generation form including
  ----- BEGIN CERTIFICATE REQUEST -----
  ----- END CERTIFICATE REQUEST -----