Microsoft IIS 5 and 6 CSR Generation Instructions

Microsoft IIS 5 and 6
(CSR Generation Procedures)

A CSR is a file containing your IIS SSL certificate application information, including your Public Key. Generate your CSR and then copy and paste the CSR file into the webform during the order process:

HOST HEADERS:

The use of Host Headers is not supported by EBIZID, Microsoft or any other SSL Provider. If you choose to use host headers with SSL, you do so at your own risk. EBIZID will not give refunds when host headers are used. More information can be found on the use of host headers at the Microsoft Website. (See link below)

Microsoft K-base "SSL Not Supported" Article

DEDICATED IP ADDRESS:

Your Domain MUST have a dedicate IP address in order to install an SSL Certificate on that domain, otherwise it will not work. If you do not manage your own server, please contact your hosting company and find out if you have a dedicated IP for your domain. If you do not, they can assign one to your domain. They are very inexpensive.

Backup the private key, as there is no means to recover it should it be lost. The private key is used as input in the command to generate a Certificate Signing Request (CSR). EBIZID will reissue certificates no more than 30 days from the time of purchase. If you do not backup your key and your server fails or other problems occur after the 30 days, you will then be required to purchase a new certificate. An ounce of prevention is all that is required to prevent this from happening.

Should you choose to enter and use a Private Key password, you will need to make sure that you save that password in a secure place. If you ever need to reinstall your certificate for any reason, you will be required to enter that password. If you forget the password and it is past 30 days from your purchase date, then you will be required to purchase a new certificate. An ounce of prevention will prevent this from happening.

Generate keys and Certificate Signing Request:

1. Select Administrative Tools

2. Start Internet Services Manager

3. Open the properties window for the website the CSR is for. You can do this by right clicking on the Default Website and selecting Properties from the menu

4. Open Directory Security by right clicking on the Directory Security tab

5. Click Server Certificate . The following Wizard will appear:

6. Click Create a new certificate and click Next.

7. Select Prepare the request and click Next.

8. Provide a name for the certificate, this needs to be easily identifiable if you are working with multiple domains. This is for your records only.

9. If your server is 40 bit enabled, you will generate a 512 bit key. If your server is 128 bit you can generate up to 1024 bit keys. We recommend you stay with the default of 1024 bit key if the option is available. Click Next

10. Enter Organization and Organization Unit , these are your company name and department respectively. Click Next.

11. The Common Name field should be the Fully Qualified Domain Name (FQDN) or the web address for which you plan to use your IIS SSL Certificate, e.g. the area of your site you wish customers to connect to using SSL. For example, an EBIZID SSL Certificate issued for ebizid.com will not be valid for secure.ebizid.com . If the web address to be used for SSL is secure.ebizid.com , ensure that the common name submitted in the CSR is secure.ebizid.com . Click Next.

If you are ordering a Wildcard Certificate, the Common Name field must be in the format of: * . yourdomain . com (aterisk+period+yourdomain.com)

12. Enter your country , state and city . Click Next.

13. Enter a filename and location to save your CSR. You will need this CSR to enroll for your IIS SSL Certificate. Click Next.

14. Check the details you have entered. If you have made a mistake click Back and amend the details. Be especially sure to check the domain name the Certificate is to be "Issued To". Your IIS SSL Certificate will only work on this domain. Click Next when you are happy the details are absolutely correct.

15. When you make your application, make sure you include the CSR in its entirety into the appropriate section of the order form.

16. Click Next

17. Confirm your details in the enrollment form

18. Click Finish

What your CSR will look like when your finished.

When sending your CSR to EBIZID, you MUST copy and paste the entire CSR Request, including the beginning and ending lines as shown below.
-----BEGIN CERTIFICATE REQUEST-----
-----END CERTIFICATE REQUEST-----
Failure to do so will result in you having to resend your CSR in the correct format to EBIZID which will cause a prolonged delay in processing your order.

To save your private key:

1. Go to: Certificates snap in in the MMC

2. Select Requests

3. Select All tasks

4. Select Export

Backup the private key, as there is no means to recover it should it be lost. The private key is used as input in the command to generate a Certificate Signing Request (CSR). EBIZID will reissue certificates no more than 30 days from the time of purchase. If you do not backup your key and your server fails or other problems occur after the 30 days, you will then be required to purchase a new certificate. An ounce of prevention is all that is required to prevent this from happening.

Should you choose to enter and use a Private Key password, you will need to make sure that you save that password in a secure place. If you ever need to reinstall your certificate for any reason, you will be required to enter that password. If you forget the password and it is past 30 days from your purchase date, then you will be required to purchase a new certificate. An ounce of prevention will prevent this from happening.

Microsoft IIS 4.x CSR Generation Instructions

Microsoft IIS 4.x

CSR Generation Instructions