SSL Certificate Support
Windows 2008 IIS
You can perform this procedure by using the user interface (UI).
Open IIS Manager and navigate to the level you want to manage. For information about opening IIS Manager, see Open IIS Manager (IIS 7). For information about navigating to locations in the UI, see Navigation in IIS Manager (IIS 7).
In Features View, double-click Server Certificates.
In the Actions pane, click Create Certificate Request.
On the Distinguished Name Properties page of the Request Certificate Wizard, type the following information, and then click Next.
- In the Common name text box, type a name for the certificate.
- In the Organization text box, type the name of the organization in which the certificate will be used.
- In the Organizational unit text box, type the name of the organizational unit in the organization in which the certificate will be used.
- In the City/locality text box, type the unabbreviated name of the city or locality where your organization or organizational unit is located.
- In the State/province text box, type the unabbreviated name of the state or province where your organization or organizational unit is located.
- In the Country/region text box, type the name of the country or region where your organization or organizational unit is located.
- In the Common name text box, type a name for the certificate.
On the Cryptographic Service Provider Properties page, select either Microsoft RSA SChannel Cryptographic Provider or Microsoft DH SChannel Cryptographic Provider from the Cryptographic service provider drop-down list. By default, IIS 7 uses the Microsoft RSA SChannel Cryptographic Provider.
In the Bit length drop-down list, select a bit length that can be used by the provider. By default, the RSA SChannel provider uses a bit length of 1024. The DH SChannel provider uses a bit length of 512. A longer bit length is more secure, but it can affect performance.
Click Next.
On the File Name page, type a file name in the Specify a file name for the certificate request text box, or click the browse button (…) to locate a file, and then click Finish.
Send the certificate request to a public CA.