How to generate CSR key for SSL using IIS

[innovative2001]

Hi,

Below are the steps to generate the CSR key for SSL using IIS 5.0:

1) Select the Internet Information Services console (IIS) within the Administrative Tools menu.

2) Select the computer and web site (host) that you wish to secure. Right click to mouse and select Properties.

3) Select the Directory Security tab.

4) Select Server Certificate under Secure Communications

5) Click Next in the Welcome to the Web Server Certificate Wizard window.

6) Select Create a new certificate, Click Next.

7) Select Prepare the request now, but send it later.

8 ) At the Name and Security Settings screen, fill in the [friendly] name field for the new certificate. Select bit length. Recommend using 1024-bit length. Click Next.

Note : When creating a CSR you must follow these conventions. Enter your Distinguished Name Field information. The following characters can not be accepted: < > ~ ! @ # $ % ^ * / \ ( ) ?&. This includes commas.

9) Enter your Administrator contact information.

10) Enter a path and file name for the CSR. Verify your request and then click Next.

11) At the Completing the Web Server screen, select Finish.

12) DO NOT REMOVE the pending request or the .crt file will not match and your certificate will not install.

I have take refrence from the webhosting forums (http://forums.accuwebhosting.com/index.php?showtopic=246), thanks to John

[mitto]

Seems useful.

Thanks for this how to!!

[ASP-Hosting.ca]

This is a frequently asked question, and most people do not know how to do it right.

[navid_help4you]

thanks for sharing

[Unregistered]

how can i get CSR? currently my web server host by Powweb..

[partystar]

Maybe this site will help you:http://www.csr.com/home.php. You should try it. Good luck.

[Oracle]

Generating an IIS SSL Certificate Signing Request (CSR) using Microsoft IIS 4.x
A CSR is a file containing your IIS SSL certificate application information, including your Public Key. Generate your CSR and then copy and paste the CSR file into the webform in the enrollment process:

Generate keys and certificate:
Open the Microsoft Management Console (MMC) for IIS (available in the Windows NT 4.0 Option Pack > Microsoft Internet Information Server > Internet Service Manager.
In the MMC, Expand the Internet Information Server folder and expand the computer name
Open the properties window for the website the CSR is for. You can do this by right clicking on the website
Open Directory Security Folder
In the Secure Communications area of this Property Sheet, select the Key Manager button and select "Create New Key..."
Choose "Put the request in a file that you will send to an authority." Select an appropriate filename (or accept the default).
Fill in the appropriate details:
Fill in all the fields, do not use the following characters:
! @ # $ % ^ * ( ) ~ ? > < & / \
note: If your server is 40 bit enabled, you will generate a 512 bit key
If your server is 128 bit you can generate up to 1024 bit keys
Click Next until you finish
Click Finish
Key Manager will display a key icon under the WWW icon. The key will have an orange slash through it indicating it is not complete. Choose the "Computers" menu and select Exit. Select YES when asked to commit changes
When you make your application, make sure you include this file (this is your CSR) in its entirety into the appropriate section of the enrollment form - including
-----BEGIN CERTIFICATE REQUEST-----to-----
END CERTIFICATE REQUEST-----
Click Next
Confirm your details in the enrollment form
Finish

enjoy.........

[ross03]

Thank you. This's very useful