Microsoft IIS 7.0

To generate a CSR for Microsoft IIS 7.0 perform the following steps:

Please note, as of January 2011, all CSR’s must be generated with a key length of 2048
Step 1: Choose Start > Administrative Tools > Internet Information Services (IIS) Manager.

Step 2
: In the IIS Manager, choose your server name.

Step 3: In the “Features” pane (the middle pane), double-click the “Server Certificates” option located under the “Security” heading.


Step 4: To begin the process of requesting a new certificate select the “Create Certificate Request” option from the “Actions” pane.


Step 5: The first screen of the wizard asks for details regarding the new site. The common name should match the fully-qualified domain name for the site. Otherwise, provide information about your site, making sure to spell out the name of your state and locality.


Step 6: Click “Next” to continue.

Step 7: The next screen of the wizard asks you to choose cryptography options. The default, Microsoft RSA SChannel Cryptography Provider is fine. Select 2048 for bit length.


Step 8: Click “Next” to continue.

Step 9: Provide a file name to which to save the certificate request. You will need the contents of this file in the next step, so make sure you know where to find it.


Step 10: Go to the Geotrust Enrollment pages.

Step 11: To copy and paste the information into the enrollment form, open the file in a text editor that does not add extra characters (Notepad or Vi are recommended).