How To Generate CSR on IIS 7 and 8

STEP 1

1. Click Start;
2. Select Administrative Tools;
3. Launch Internet Services Manager;
4. Click Server Name;
5. In the central menu, double-click the "Server Certificates" button in the "Security" section.

STEP 2

There is the "Actions" section on the right side, in which you need to click on "Create Certificate Request."

STEP 3

This will open the Certificate Request Form Wizard. In the Distinguished Name Properties window, enter the following information:

1. The Common Name field should contain the Fully Qualified Domain Name (FQDN) - the web address for which you plan to use the IIS SSL certificate. You must be sure that the Common name that you have verified with CSR is the correct domain name / FQDN for which you are going to use the certificate. For a Wildcard SSL certificate, the Common Name must contain at least one asterisk (*) For example: * .domain.tld, * .sub.domain.tld
2. Enter the Organization (company name) and the Organization Unit;
3. Enter the location of the company: country, city, region;
4. Click Next.

STEP 4

In the "Cryptographic Service Provider Properties" window, leave both settings as default (Microsoft RSA SChannel and 2048) and then click Next.

STEP 5

• Enter the file name and location to save your CSR file. You will need this CSR to register your IIS SSL certificate;
• Click Finish;
• Your new CSR is contained in \Desktop\cert_req.txt

To save the private key:

1. Go to: Certificates in the MMC snap-in;
2. Select Requests;
3. Select All tasks;
4. Select Export;

Hints!

Please be sure that you have inserted the entire CSR into the SSL Generation form including
----- BEGIN CERTIFICATE REQUEST -----
----- END CERTIFICATE REQUEST -----