IIS 7 SSL Certificate CSR Creation


If you already have your SSL Certificate and just need to install it, see IIS 7 SSL Certificate Installation.

How to generate a CSR in Microsoft IIS 7

New: Use the DigiCertUtil to create your CSR and automatically install the certificate on any Windows machine. If you have any questions and would like expert help with your installation feel free to chat with an SSL expert – they’re ready to help regardless of where you purchased your SSL certificate.

IIS 7 CSR video walkthrough

    1. Click Start, then Administrative Tools, then Internet Information Services (IIS) Manager.
    2. Click on the server name.
    3. From the center menu, double-click the “Server Certificates” button in the “Security” section (it is near the bottom of the menu).

      IIS 7 Security Certificates

    4. Next, from the “Actions” menu (on the right), click on “Create Certificate Request.” This will open the Request Certificate wizard.

      IIS 7 Create Certificate Request

    5. In the “Distinguished Name Properties” window, enter the information as follows:

      Common Name – The name through which the certificate will be accessed (usually the fully-qualified domain name, e.g., www.domain.com or mail.domain.com).

      Organization – The legally registered name of your organization/company.

      Organizational unit – The name of your department within the organization (frequently this entry will be listed as “IT,” “Web Security,” or is simply left blank).

      City/locality – The city in which your organization is located.

      State/province – The state in which your organization is located.

      Country/region – If needed, you can find your two-digit country code in our list.

      IIS 7 Distinguished Name Properties

    6. Click Next.
    7. In the “Cryptographic Service Provider Properties” window, enter the following information and then, click Next:

      Cryptographic service provider – In the drop-down list, select Microsoft RSA SChannel…, unless you have a specific cryptographic provider.
      Bit length – In the drop-down list, select 2048 (or higher).

      IIS 7 Cryptographic Service Provider Properties

    8. Enter a filename for your CSR file. 

      Remember the filename that you choose and the location to which you save it. You will need to open this file as a text file and copy the entire body of it (including the Begin and End Certificate Request tags) into the online order process when prompted.

      IIS 7 CSR Pending Request Filename

    9. After you receive your SSL Certificate from DigiCert, you can install it.

      See IIS 7 SSL Certificate Installation.

Vea nuestras instrucciones en español: IIS 7 Crear CSR.

IIS SSL Certificates, Guides, & Tutorials


Generating a CSR for Issuance of an SSL Certificate in IIS

Para instrucciones y un video en español que trata de IIS 7 Crear CSR.

How to generate a Certificate Signing Request for your Microsoft IIS Web Server