To create a Certificate Signing Request (CSR) on a Windows Server, you can use the Internet Information Services (IIS) Manager. Follow these steps:
- Open Internet Information Services (IIS) Manager on your server.
- You can typically find it under “Windows Administrative Tools” in the Start menu.
- Select your server node in the Connections pane.
- In the center pane, double-click on “Server Certificates.”
- In the Actions pane on the right-hand side, click on “Create Certificate Request.”
- The “Request Certificate” wizard will open. Fill in the following information:
- Common Name (CN): The fully qualified domain name (FQDN) of the website or server for which you are requesting the certificate (e.g., www.example.com).
- Organization: The legal name of your organization.
- Organizational Unit: The department or division within your organization.
- City/locality, State/province, and Country/region: The location information for your organization.
- Cryptographic Service Provider: Leave the default value (Microsoft RSA SChannel Cryptographic Provider).
- Bit Length: Choose the desired key length (e.g., 2048 bits).
- Friendly Name: Optionally, provide a friendly name for the certificate.
- Click “Next” to continue.
- Choose a file name and location to save the CSR file.
- Click “Finish” to generate the CSR file.
- Open the generated CSR file with a text editor, such as Notepad.
- Copy the entire content of the CSR, including the BEGIN CERTIFICATE REQUEST and END CERTIFICATE REQUEST tags.
- Submit the CSR to a Certificate Authority (CA) to obtain a signed certificate. This can typically be done through the CA’s website or by providing them with the CSR file.
Once you have obtained the signed certificate from the CA, you can complete the certificate request process in IIS by importing the certificate using the “Complete Certificate Request” option in the IIS Manager.
Note: Ensure that you keep the private key associated with the CSR secure, as it is essential for installing the signed certificate later.
https://www.digicert.com/kb/csr-creation-ssl-installation-iis-10.htm
