CSR Creation for IIS Web Server SSL Certificates

If you already have your SSL Certificate and just need to install it, see IIS 5 & 6 SSL Certificate Installation.

How to generate a CSR in IIS 5.x or 6.x Web Server

New: IIS 5/6 CSR video walkthrough

  1. From the Administrative Tools in the Control Panel, run Internet Information Services.

    IIS Default Web Site

  2. Right-click on the website you are securing, and select Properties. Click on the Directory Security tab, and hit the Server Certificate button.

    IIS Directorty Security - Server Certificate

  3. Click next. Choose 'Create a new certificate' and hit next.

    If you are renewing an existing certificate, you will instead see the option to Renew, Remove, or Replace your certificate. Choose the option to Renew and skip over steps 5-8.

    IIS Create a new Certificate

  4. Choose 'Prepare the request now, but send it later' and hit next.

    IIS Prepare request now, send it later

  5. Enter a name for the certificate that you can identify on your server. Choose a bit-length of 2048. Leave the other boxes un-checked.

    IIS Name and Security Settings
  6. Enter the full legal name of your company. Enter a department such as 'Security' or 'IT' in the organizational unit.

    IIS Organization Information

  7. Enter the fully qualified domain name of your site (ex: www.yourdomain.com)

    IIS Your Site's Common Name

  8. Enter the location of your organization: Country, State, and City.

    IIS Geographical Information

  9. Choose a file name and a location to save your SSL Certificate Signing Request (CSR). The file should be saved as a text file (.txt)

  10. Click next to generate the file.

    IIS Request File Summary

  11. Now open the CSR file using a text editor such as notepad, and copy and paste the text (including the BEGIN and END tags) into the DigiCert order form.

    ** Important ** - When you have completed the steps above a "pending request" will be created on your website. This "pending request" MUST NOT BE DELETED. Later, when your certificate is issued, you must install the certificate to this exact pending request or the certificate will not be functional.

  12. After you receive your SSL Certificate from DigiCert, you can install it.

    See IIS 5 & 6 SSL Certificate Installation.

IIS SSL Certificates, Guides, & Tutorials

Buy Now Learn More

Para hacer la petición de firma de certificado en IIS 6 visite la página IIS 6 CSR Creación.

Generating a CSR for Issuance of an SSL Certificate in IIS

SSL Certificate CSR Creation for your Microsoft IIS Web Server