Home My Account ☎ 480-624-2500

Generate CSR Windows Server 2012 IIS 8

September 1, 2016

Before you can request a certificate through our online application, you need to use Microsoft®'s IIS Manager to generate a Certificate Signing Request (CSR) for your website.


To Generate a Certificate Signing Request (CSR) — Microsoft IIS 8

1. Launch the Server Manager.

2. From Tools, select Internet Information Services (IIS) Manager.

3. In the Connections panel on the left, click the server name for which you want to generate the CSR.

4. In the middle panel, double-click Server Certificates.

5. In the Actions panel on the right, click Create Certificate Request....

6. Enter the following Distinguished Name Properties, and then click Next:

The following characters are not accepted when entering information: < > ~ ! @ # $ % ^ * / \ ( ) ? &


a. Common Name — The fully-qualified domain name (FQDN) — or URL — for which you plan to use your certificate (the area of your site you want customers to connect to using SSL).

An SSL certificate issued for www.coolexample.com is not valid for secure.coolexample.com. If you want your SSL to cover secure.coolexample.com, make sure the common name submitted in the CSR is secure.coolexample.com.

If you are requesting a wildcard certificate, add an asterisk (*) on the left side of the Common Name (e.g., *.coolexample.com or *.secure.coolexample.com).

b. Organization — The name in which your business is legally registered. The organization must be the legal registrant of the domain name in the certificate request.

If you are enrolling as an individual, enter the certificate requester's name in the Organization field, and the Doing Business As (DBA) name in the Organizational Unit field.


c. Organizational Unit — Use this field to differentiate between divisions within an organization (such as "Engineering" or "Human Resources").

d. City/Locality — The full name of the city in which your organization is registered/located. Do not abbreviate.

e. State/Province — The full name of the state or province where your organization is located. Do not abbreviate.

f. ountry — The two-letter International Organization for Standardization- (ISO-) format country code for the country in which your organization is legally registered.

7. For Cryptographic service provider, select Microsoft RSA SChannel Cryptographic Provider.

8. For Bit length, select 2048 or higher, and then click Next.

9. Click …, enter the location and file name for your CSR, and then click Finish.