How To Generate CSR on IIS 7 and 8

Here is a complete guide on how to Generate CSR and Private keys on your Windows IIS 7 or IIS 8 servers. We recommend that you write down your password and backup your key because, in case of loss, they cannot be restored, and we will not be able to help you. Any storage is recommended for saving your backup files.

STEP 1

1. Click Start;
2. Select Administrative Tools;
3. Launch Internet Services Manager;
4. Click Server Name;
5. In the central menu, double-click the "Server Certificates" button in the "Security" section.

STEP 2

There is the "Actions" section on the right side, in which you need to click on "Create Certificate Request."

STEP 3

This will open the Certificate Request Form Wizard. In the Distinguished Name Properties window, enter the following information:

1. The Common Name field should contain the Fully Qualified Domain Name (FQDN) - the web address for which you plan to use the IIS SSL certificate. You must be sure that the Common name that you have verified with CSR is the correct domain name / FQDN for which you are going to use the certificate. For a Wildcard SSL certificate, the Common Name must contain at least one asterisk (*) For example: * .domain.tld, * .sub.domain.tld
2. Enter the Organization (company name) and the Organization Unit;
3. Enter the location of the company: country, city, region;
4. Click Next.

STEP 4

In the "Cryptographic Service Provider Properties" window, leave both settings as default (Microsoft RSA SChannel and 2048) and then click Next.

STEP 5

• Enter the file name and location to save your CSR file. You will need this CSR to register your IIS SSL certificate;
• Click Finish;
• Your new CSR is contained in \Desktop\cert_req.txt

To save the private key:

1. Go to: Certificates in the MMC snap-in;
2. Select Requests;
3. Select All tasks;

Select Export;