Creating a CSR

Use the instructions on this page to create your certificate signing request (CSR) and then to install your SSL certificate in IIS 8 on Windows Server 2012 or IIS 8.5 on Windows Server 2012 R2.

1.     To create your CSR via IIS 8 and IIS 8.5: How to Create Your CSR on Windows Server 2012.

2.     To install your SSL certificate, via IIS 8 and IIS 8.5: How to Install and Configure Your SSL Certificate on Windows Server 2012.

Step 1: Create Your CSR in IIS 8 or IIS 8.5 on Windows Server 2012

1.     From the Start screen, find Internet Information Services (IIS) Manager and open it.

2.     In the Connections pane, locate and click the server.

3.     In the server Home page (center pane) under the IIS section, double-click Server Certificates. 

4.     In the Actions menu (right pane), click Create Certificate Request. 

5.     In the Request Certificate wizard, on the Distinguished Name Properties page, provide the information specified below and then click Next.

Common name:	The fully-qualified domain name (FQDN) (e.g., www.example.com).
Organization:	Your company’s legally registered name (e.g., YourCompany, Inc.).
Organizational unit:	The name of your department within the organization. This entry will usually be listed as "IT", "Web Security", or is simply left blank.
City/locality:	The city where your company is legally located.
State/province:	The state/province where your company is legally located.
Country/region:	The country/region where your company is legally located. Use the drop-down list to select your country.

6.    

7.     On the Cryptographic Service Provider Properties page, provide the information specified below and then click Next.

Cryptographic service provider:	In the drop-down list, select Microsoft RSA SChannel Cryptographic Provider (unless you have a specific cryptographic provider).
Bit length:	In the drop-down list, select 2048 (unless you have a specific reason for using a larger bit length).

8.    

9.     On the File Name page, under Specify a file name for the certificate request, click the  …  button to specify a save location for your CSR.

Note: Remember the filename and save location of your CSR file. If you enter a filename without specifying a location, your CSR will be saved to C:\Windows\System32. 

10.   When you are done, click Finish.

11.   Open the CSR file using a text editor (such as Notepad), then copy the text (including the -----BEGIN NEW CERTIFICATE REQUEST----- and -----END NEW CERTIFICATE REQUEST----- tags) and paste it into the DigiCert order form. 

12.   After you receive your SSL certificate from DigiCert, you can install it.