To generate a CSR (Certificate Signing Request) for Internet Information Server version 7 (IIS7), it is recommended to utilize the Internet Services Manager and follow the steps outlined below:
How to Generating a CSR in IIS7
ααα αΆαααΈ 1
- α α»α Start >> α§αααααααααααΆα.
- Start Internet Information Services (IIS) Manager.
- α α»α ααααααααΆαααΈααααααΎ >> α α»α ααΈαααααΎ Server Certificates αα αααα»α ααααα α’αΆαα’αΆαα’αα section, located in the center menu.
- ααααΎα ααααα Actions menu (on the right) >> click on Create Certificate Request.
- The Request Certificate wizard will be opened. From here, you will need to enter the information required for the CSR code (details and example listed below):
αααααααΌαα : yourdomain.com
α’αααααΆα (Organization): MyCompany Ltd
Organization Unit (eg, section): IT, Support, Sales etc.
City/ Locality Name: α‘αΌαβα’αΆααβαααβααα
State or Province Name (full name)α ααΆααΈα αααααααΆ
Country Name (2 letter code)α α’αΆαααα·α
ααα αΆαααΈ 2
For Wildcard SSL certificates, the common name should be specified in the format: *.yourdomain.tld.
- α α»α Next once all fields are filled in completely.
- αααα»α Cryptographic Service Provider Properties αααα’α½α
:
- Leave Cryptographic Service provider default (βMicrosoft RSA SChannel Cryptographic Providerβ).
- Change the Bit Length to 2048.
In accordance with the Comodo (now Sectigo) Certificate Authority policy change, starting from December 20, 2010, SSL Certificates can be issued using CSR codes with 2048-bit and higher.
- α α»α Next.
- Specify a filename and location to save your CSR code (e.g. c:\certreq.txt).
- α α»α Finish.
ααααα»ααααΉα!