• Home
  • Knowledge Base
  • Certificate Signing Request (CSR) Generation Instructions for Microsoft IIS 7

Certificate Signing Request (CSR) Generation Instructions for Microsoft IIS 7

In this article, we have provided comprehensive instructions on how to generate a certificate signing request on Microsoft IIS 7.

NOTE: All certificates must have a keysize of 2048 bit or greater.
  1. Open Internet Information Services (IIS) Manager on your server.
  2. In the left-hand pane, click on the server name.
  3. In the center pane, under the "IIS" section, click on "Server Certificates."
  4. In the Features pane (the middle pane), double-click the Server Certificates option located under the Security heading.

  5. To begin the process of requesting a new certificate, from the Actions pane, choose Create Certificate Request option as shown below.

  6. The first screen of the wizard asks for details regarding the new site.
  7. All the fields need to be filled in.  In order to fill in this form consider:
    1. Common Name (CN):  The Common Name is the Host + Domain Name. It looks like " www.company.com"  or "company.com".
    2. Organization (O):  If your company or department has an &, @, or any other symbol using the shift key in its name, you must spell out the symbol or omit it to enroll, for example: XY & Z Corporation would be XYZ Corporation or XY and Z Corporation.
    3. Organizational Unit (OU):  This field is the name of the department or organization unit making the request.
    4. Locality or City (L):  The Locality field is the city or town name, for example: Berkeley.
    5. State or Province (S):  Spell out the state completely; do not abbreviate the state or province name, for example: California.
    6. Country Name (C):  Use the two-letter code without punctuation for country, for example: US or CA.

  8. Click Next to continue. 
  9. The next screen of the wizard asks you to choose cryptography options.  The default, Microsoft RSA SChannel Cryptography Provider is fine.  Select a key-bit length of 2048.

  10. Click  Next  to continue. 
  11. Finally, provide a filename to which to save the certificate request.  The contents of the CSR file are needed in the next step, so make sure the file location is known.  To change the location of where you wish to save the CSR, select the box with the 3 periods next to the file name.