IIS SSL Certificate Signing Request (CSR) Generation using Microsoft IIS 4.x
A CSR is a file containing your IIS SSL Certificate application information, including your Public Key. Generate your CSR, then copy and paste the CSR file into the webform in the enrollment process:
Generate keys and IIS SSL Certificate:
- Open the Microsoft Management Console (MMC) for IIS (available
in the Windows NT 4.0) Option Pack > Microsoft Internet Information
Server > Internet Service Manager.
- In the MMC, Expand the Internet Information Server folder
and expand the computer name
- Open the properties window for the website.
You can do this by right clicking on the website
- Open Directory Security Folder
- In the Secure Communications area of this Property Sheet,
select the Key Manager button and select "Create New Key..."
- Choose "Put the request in a file that you will send
to an authority." Select an appropriate filename (or accept the
- Fill in the appropriate details:
- Fill in all the fields do not use the
! @ # $ % ^ * ( ) ~ ? > < & / \
Note: If your server is 40 bit enabled, you will generate a 512 bit
If your server is 128 bit you can generate up to 2048 bit keys
- Click Next until you finish
- Click Finish
- Key Manager will display a key icon under the WWW icon.
The key will have an orange slash through it will indicate that the procedure is not complete.
Choose the "Computers" menu and select Exit. Select YES when
asked to commit changes
- When you make your application, make sure
you include this file (this is your CSR) in its entirety into the appropriate
section of the enrollment form including
-----BEGIN CERTIFICATE REQUEST-----to-----END CERTIFICATE REQUEST-----
- Click Next
- Confirm your details in the enrollment
We recommend that you make a note of your password and
backup your key. These are known only to you, so if you lose them, we cannot help you. A floppy diskette (or other removable media is recommended
for your backup files).