Generate CSR – Microsoft IIS 7.x

A CSR is a file containing your IIS SSL certificate application information, including your Public Key. Generate your CSR and then copy and paste the CSR file into our sign-up forms.

Generate Keys and Certificate Signing Request

– Click Start
– Select Administrative Tools
– Start Internet Services Manager
– Click Server Name

From the center menu, double-click the “Server Certificates” button in the “Security” section.

Select “Actions” menu (on the right), click on “Create Certificate Request.”

This will open the Request Certificate wizard.

In the “Distinguished Name Properties” window, enter the information as follows:

The Common Name field should be the Fully Qualified Domain Name (FQDN) or the web address for which you plan to use your IIS SSL Certificate, e.g. the area of your site you wish customers to connect to using SSL. For example, an Instant SSL Certificate issued for will not be valid for If the web address to be used for SSL is, ensure that the common name submitted in the CSR is

Enter Organisation and Organisation Unit, these are your company name and department respectively.

Enter your City/locality, State/province and Country/region.

Click Next.

In the “Cryptographic Service Provider Properties” window please ensure you select 2048 bit.

Enter a filename and location to save your CSR. You will need this CSR to enroll for your IIS SSL Certificate.

Click Finish.

Your new CSR is now contained within the file c:\certreq.txt

When you make your application, make sure you include the CSR in its entirety into the appropriate section of the enrollment form – including


– Click Next
– Confirm your details in the enrollment form
– Finish

To save your private key:

– Go to: Certificates snap in in the MMC
– Select Requests
– Select All tasks
– Select Export

We recommend that you make a note of your password and backup your key as these are known only to you, so if you loose them we can’t help!