Generate a CSR: IIS 5 & IIS 6

To generate a Certificate Signing Request (CSR), please do the following:

  • Step 1 of 18

    Open Internet Information Services 5 (IIS).

  • Step 2 of 18

    Select the site where you want to enable secure communications.

  • Step 3 of 18

    Right click the site to be secure, and select Properties.

  • Step 4 of 18

    Click the Directory Security tab.

  • Step 5 of 18

    Under the Secure Communications section, click Server Certificate.

  • Step 6 of 18

    The Web Server Certificate Wizard will start.

  • Step 7 of 18

    Click Next.

  • Step 8 of 18

    Select the Create a new certificate option and click Next.

  • Step 9 of 18

    Select the Prepare the request now, but send it later option and click Next.

  • Step 10 of 18

    Type a Friendly Name for the certificate (this can be anything).

  • Step 11 of 18

    Select the Bit Length (Default 2048) and whether you want to use SGC (server gated Cryptography), and then click Next.

  • Step 12 of 18

    Input the Organization (O) and the Organizational Unit (OU) fields. Click Next.

  • Step 13 of 18

    Input the Common Name (Fully Qualified Domain Name -

    Please note: This MUST reflect the web server DNS Name.

  • Step 14 of 18

    Click Next.

  • Step 15 of 18

    Input the Country/Region, City and State. This information must be correct – abbreviations will not be accepted by the system.

  • Step 16 of 18

    Select where the file will be saved, and the name of the file. Typically, the root of the Hard Drive, or on Desktop is recommended, so the file can be found quickly. Once you have selected the name and location, click Next.

  • Step 17 of 18

    You will now be presented with a summary screen of all the information that has been inputted. Ensure all information is correct, and click Next.

  • Step 18 of 18

You have now generated your Certificate Signing Request. Select Finish to close the wizard.