Create a Certificate Signing Request for Microsoft ISA Server 2004 & 2006
To generate a Certificate Signing Request (CSR), perform the following steps:
- Open Internet Information Services (IIS)
- Select the site where you want to enable secure communications
- Right click the site to be secure, and select "Properties"
- Click the "Directory Security" tab
- Under the "Secure Communications" section, click "Server Certificate"
- The following "Web Server Certificate Wizard" will start
- Click Next
- Select the "Create a new certificate" option and click Next
- Select the "Prepare the request now, but send it later" option, and click Next
- Type a Friendly Name for the certificate (This can be anything)
- Select the "Bit Length" (2048) and whether you want to use SGC (server gated Cryptography), then click Next
- Input the Organization (O) and the Organizational Unit (OU) fields. Click Next
- Input the Common Name (Fully Qualified Domain Name – www.yourdomain.com). This MUST reflect the web server DNS Name. Click Next
- Input the Country/Region, City and State. This information must be correct – abbreviations will not be accepted by the system
- Select where the file will be saved, and the name of the file. Typically, the root of the Hard Drive, or on Desktop is recommended, so the file can be found quickly. Once you have selected the name and location, click Next.
- You will now be presented with a summary screen of all the information that has been inputted. Insure all information is correct, and click Next
- You have now generated your Certificate Signing Request. Select Finish to close the wizard.
This file can now be submitted via the web site.