Article Summary
- You can create the IIS 7.0 CSR with OpenSSL, or manually in Windows, because IIS defaults to a deprecated format instead of sha256.
- In Windows, open 'Run', type 'MMC', then add the Certificates snap-in for the Local Computer account via 'File' > 'Add / Remove Snap-In'.
- Right-click Certificates under 'Personal' and choose 'All Tasks' > 'Advanced Operations' > 'Create custom request'.
- Choose 'Proceed without enrollment policy', select 'No Template CNG key' with PKCS #10, then open 'Details' > 'Properties' > 'Subject' to add values.
To generate a CSR for Microsoft IIS 7.0 perform the following steps:
-
Select start on your toolbar. In the search bar type “Run”. In the pop-up that appears type MMC. This should bring up the Microsoft common Console Document or “certmgr.msc”.
-
In certmgr, select “File” in the tool bar and follow this path: Add / Remove Snap-In > Certificates > Add > Computer Account > Local Computer.
-
You will want to select Certificates then OK.
-
Open the “Personal” dropdown and right-click Certificates and follow this path: All Tasks > Advanced Operations > Create custom request then Next.
-
Now you’ll click “Proceed without enrollment policy” and Next again.
-
You want to select No Template CNG key and under the dropdown select PKCS #10. Once again select Next.
-
Click on “Details” then Properties > Click on the “Subject” tab.
-
You will need to select the following types on the dropdown on the left, add the value then add it to the right side: