How to generate a CSR in Microsoft IIS 7

How to generate a CSR in Microsoft IIS 7

To help you generate your CSR for Microsoft IIS 7 we've prepared a video walkthrough and a text/screenshot walkthrough. If you'd like a tool to help you automatically install the certificate on any Windows machine you can download our DigiCertUtil. As always, if you have any questions and would like expert help with your installation feel free to chat with an SSL expert - they're ready to help regardless of where you purchased your SSL certificate.

IIS 7 CSR video walkthrough

1. Click Start, then Administrative Tools, then Internet Information Services (IIS) Manager.

2. Click on the server name.

3. From the center menu, double-click the "Server Certificates" button in the "Security" section (it is near the bottom of the menu).

   

4. Next, from the "Actions" menu (on the right), click on "Create Certificate Request." This will open the Request Certificate wizard.

   

5. In the "Distinguished Name Properties" window, enter the information as follows:

   Common Name - The name through which the certificate will be accessed (usually the fully-qualified domain name, e.g., www.domain.com or mail.domain.com).

   Organization - The legally registered name of your organization/company.

   Organizational unit - The name of your department within the organization (frequently this entry will be listed as "IT," "Web Security," or is simply left blank).

   City/locality - The city in which your organization is located.

   State/province - The state in which your organization is located.

   Country/region - If needed, you can find your two-digit country code in our list.

   

6. Click Next.

7. In the "Cryptographic Service Provider Properties" window, leave both settings at their defaults (Microsoft RSA SChannel and 2048) and then click next.

   

8. Enter a filename for your CSR file.
   
   Remember the filename that you choose and the location to which you save it. You will need to open this file as a text file and copy the entire body of it (including the Begin and End Certificate Request tags) into the online order process when prompted.