Skip to content

Microsoft IIS 7.0

Article Summary

  • You can create the IIS 7.0 CSR with OpenSSL, or manually in Windows, because IIS defaults to a deprecated format instead of sha256.
  • In Windows, open 'Run', type 'MMC', then add the Certificates snap-in for the Local Computer account via 'File' > 'Add / Remove Snap-In'.
  • Right-click Certificates under 'Personal' and choose 'All Tasks' > 'Advanced Operations' > 'Create custom request'.
  • Choose 'Proceed without enrollment policy', select 'No Template CNG key' with PKCS #10, then open 'Details' > 'Properties' > 'Subject' to add values.

To generate a CSR for Microsoft IIS 7.0 perform the following steps:

Please note all CSR’s must be generated with a key length of 2048 and using SHA256 as the hash algorithm
To generate a CSR for Microsoft IIS 7.0 please follow these instructions. There are two ways to create an SSL for IIS 7.0 1. Use OpenSSL. Download OpenSSL then follow our guide. 2. IIS won’t create the CSR in sha256 format unless you do it manually, it defaults to a deprecated format.
Please follow the following steps to generate the CSR in Windows:
  1. Select start on your toolbar. In the search bar type “Run”. In the pop-up that appears type MMC. This should bring up the Microsoft common Console Document or “certmgr.msc”.

  2. In certmgr, select “File” in the tool bar and follow this path: Add / Remove Snap-In > Certificates > Add > Computer Account > Local Computer.

  3. You will want to select Certificates then OK.

  4. Open the “Personal” dropdown and right-click Certificates and follow this path: All Tasks > Advanced Operations > Create custom request then Next.

  5. Now you’ll click “Proceed without enrollment policy” and Next again.

  6. You want to select No Template CNG key and under the dropdown select PKCS #10. Once again select Next.

  7. Click on “Details” then Properties > Click on the “Subject” tab.

  8. You will need to select the following types on the dropdown on the left, add the value then add it to the right side: