Create a certificate request
First, the Web server must make a certificate request. To do this, follow these steps:
- Start the Internet Service Manager (ISM), which loads the Internet Information Server snap-in for the Microsoft Management Console (MMC). To do this, click Start, point to Programs, point to Administrative Tools, and then click Internet Service Manager or Internet Information Services (IIS) Manager.
- Double-click the server name so that you see all of the Web sites. In IIS 6.0, expand Web Sites.
- Right-click the Web site on which you want to install the certificate, and then click Properties.
- Click the Directory Security tab, and then click Server Certificate under Secure Communications to start the Web Server Certificate Wizard.
- In IIS 6.0, click Next. If you are running IIS 5.0, go to step 6.
- Select Create a new certificate and click Next.
- Select Prepare the request now, but send it later and click Next.
- Type a name for the certificate. You may want to match the certificate name to the name of the Web site. Now, select a bit length; the higher the bit length, the stronger the certificate encryption. Select Server Gated Cryptography if your users may be coming from countries with encryption restrictions.
- Type your organization name and the organizational unit (for example, MyWeb and Development Dept). Click Next.
- Type either the fully qualified domain name (FQDN) or the server name as the common name. If you are creating a certificate that will be used over the Internet, it is preferable to use a FQDN (for example, www.MyWeb.com). Click Next.
- Enter your location information, and then click Next.
- Type the path and file name to save the certificate information to, and click Next to continue.
Note If you type anything other than the default location and file name, be sure to note the name and location you choose, because you will have to access this file in later steps. - Verify the information that you have typed, and then click Next to complete the process and create the certificate request.