Step by Step PKI - Generate Certificate Request File in Windows IIS | Blog - RickyGao Pty Ltd
15011
post-template-default,single,single-post,postid-15011,single-format-standard,ajax_fade,page_not_loaded,,qode_grid_1300,footer_responsive_adv,qode-child-theme-ver-1.0.0,qode-theme-ver-13.0,qode-theme-bridge,wpb-js-composer js-comp-ver-5.4.4,vc_responsive

Step by Step PKI – Generate Certificate Request File in Windows IIS

Step by Step PKI – Generate Certificate Request File in Windows IIS

PKI (Public Key Infrastructure) area is one of the most hard understanding topics in IT industry. I have been writing certificate related posts for years, but some people still comment back saying it is still not clear enough.

So a series of Step by Step guide is required in order to help people understand PKI better.

Let’s get started with Generate Certificate Request (.csr) file first

 

Prerequisite:

Windows IIS role needs to be installed

 

Guide:

1. Open IIS, Start –> inetmgr

2. Select Computer (Server) name under “connections”, double click on “Server Certificates”

image

3. Select “Create Certificate Request…”

image

4. Fill in the certificate request information

Common name<Important>
<Issued to name will be shown on certificate>
example: www.RickyGao.com.au 
Organization<can be anything>RickyGao Pty Ltd 
Organizational unit<can be anything>IT 
City/locality<can be anything>Melbourne 
State/province<can be anything>Victoria 
Country/region<can be anything>Australia 

 

image

5. Choose “cryptographic service provider”

The default “Microsoft RSA SChannel Cryptographic Provider” is usually selected and more compatible.

2048 “Bit length” is now internet standard

image

6. Save the Certificate Request File (.csr) to local

image

 

Now, you have successfully generated a Certificate Request File (.csr) from Windows IIS.

 

Next: Issue a new certificate from ISP or Corporate PKI

Enjoy Learning
CLICK ↓↓↓↓↓↓ to get a 10 days FREE TRIAL technology learning from PluralSight