Generating a CSR in Windows IIS 8

Introduction

This guide details howto generate a certificate signing request or CSR within Microsoft Windows using IIS 8.

1 – Open IIS Internet Information Services Manager

This can be done by going to Start -> Control Panel -> System and Security -> Administrative Tools, and then select Internet Information Services (IIS) Manager.
Or through Server Manager -> Select IIS from the left side -> Right click the option in the centre.

2 – Choose the IIS Server Instance you want to generate the certificate for

3 – Select “Create Certificate Request”

4 – Distinguished Name Properties

Enter the required details, note that these will be publicly available and should match the details you enter with your selected SSL Certificate provider. Our example below.

5 – Cryptographic Service Provider Properties

The next step should default to “Microsoft RSA SChannel Cryptographic Provider” however the Bit Length will default to “1024”. You should change this to “2048” as this is the current industry standard. You can choose a larger size if you wish however should only be done if you have a specific requirement to do so. Longer key lengths may increase latency and reduce compatibility.

6 – Save the CSR

Choose where to save the file.

7 – Opening the Certificate

Depending on your SSL Certificate provider you may be able to directly upload the file you have just created. Alternatively you can open the file in your chosen text editor (we use Notepad++ in the example below however Notepad also works just fine!) and copy all contents of the file INCLUDING the first and last lines containing

—–BEGIN CERTIFICATE REQUEST—–
And
—–END CERTIFICATE REQUEST—–