Generate a Certificate Signing Request (CSR)

Microsoft Internet Information Server 6

Follow these instructions to generate a CSR for your Web site. When you have completed this process, click the "close" button below to close this window and continue to the next step.

Note: If you are renewing your certificate or your site is currently running a web server certificate please refer to renewal section of this document.

  1. Select the Internet Information Services Manager within the Administrative Tools menu.

  2. Select the computer and web site (host) that you wish to secure.
    Right mouse-click to select Properties.

  3. Select the Directory Security tab.

  4. Select Server Certificate underSecure Communications

  5. Click Next in the Welcome to the Web Server Certificate Wizard window.

  6. Select Create a new certificate, Click Next.

  7. Select Prepare the request now, but send it later.

  8. At the Name and Security Settings screen, fill in the [friendly] name field for the new certificate. Select bit length. We recommend using 1024-bit length. Do NOT check “Select cryptographic services provider (CSP)…” Click Next. Click Next.

  9. When creating a CSR you must follow these conventions.
    Enter your Distinguished Name Field information.
    The following characters can not be accepted: < > ~ ! @ # $ % ^ * / \ ( ) ?&.
    This includes commas.

Distinguished Name Field

Explanation

  Example

Common Name

The fully qualified domain name for your web server. This must be an exact match.

If you intend to secure the URL https://secure.geotrust.com, then your CSR's common name must be secure.geotrust.com.

Organization

The exact legal name of your organization. Do not abbreviate your organization name.

GeoTrust Inc.

Organization Unit

Section of the organization

Marketing

City or Locality

The city where your organization is legally located.

Atlanta

State or Province

The state or province where your organization is legally located. Can not be abbreviated.

Georgia

Country/Region

The two-letter ISO abbreviation for your country.

US = United States

  1. Enter your Administrator contact information.

  2. Enter a path and file name for the CSR.
  1. Verify your request and then click Next.

  2. At the Completing the Web Server screen, select Finish.

    DO NOT REMOVE the pending request or the .crt file will not match and your certificate will not install.

  3. Select Finish.

  4. Submit your CSR to GeoTrust by clicking on Continue. You will be asked to complete the agreement and the enrollment form as well.

Renewal on a Site currently running an SSL certificate

  1. Select the Internet Information Services Manager within the Administrative Tools menu.

  2. Select the computer and web site (host) that you wish to secure.
    Right mouse-click to select Properties.

  3. Select the Directory Security tab.

  4. Select Server Certificate under Secure Communications.

  5. Click Next in the Welcome to the Web Server Certificate Wizard window.

  6. Select Renew the current certificate, Click Next.

  7. Select Prepare the request now, but send it later.

  8. At the Name and Security Settings screen, fill in the [friendly] name field for the new certificate. Select bit length. We recommend using 1024-bit length. Do NOT check “Select cryptographic services provider (CSP)…” Click Next.

  9. Enter your Administrator contact information.

  10. Enter a path and file name for the CSR.

  11. Verify your request and then click Next.

  12. At the Completing the Web Server screen, select Finish.

    DO NOT REMOVE the pending request or the .crt file will not match and your certificate will not install.

  13. Select Finish.

  14. Submit your CSR to GeoTrust by clicking on Continue. You will be asked to complete the agreement and the enrollment form as well.

[ Close ]