Request an Internet server certificate when you must prove the identity of your Web server to clients who request content that resides on the server. Internet server certificates are issued by public certification authorities (CA).
Prerequisites
For information about the levels at which you can perform this procedure, and the modules, handlers, and permissions that are required to perform this procedure, see Server Certificates Feature Requirements (IIS 7).
Exceptions to Feature Requirements
To request an Internet server certificate
You can perform this procedure by using the user interface (UI).
User Interface
To use the UI
-
Open IIS Manager and navigate to the level you want to manage. For information about opening IIS Manager, see Open IIS Manager (IIS 7). For information about navigating to locations in the UI, see Navigation in IIS Manager (IIS 7).
-
In Features View, double-click Server Certificates.
-
In the Actions pane, click Create Certificate Request.
-
On the Distinguished Name Properties page of the Request Certificate Wizard, type the following information, and then click Next.
-
In the Common name text box, type a name for the certificate.
-
In the Organization text box, type the name of the organization in which the certificate will be used.
-
In the Organizational unit text box, type the name of the organizational unit in the organization in which the certificate will be used.
-
In the City/locality text box, type the unabbreviated name of the city or locality where your organization or organizational unit is located.
-
In the State/province text box, type the unabbreviated name of the state or province where your organization or organizational unit is located.
-
In the Country/region text box, type the name of the country or region where your organization or organizational unit is located.
-
On the Cryptographic Service Provider Properties page, select either Microsoft RSA SChannel Cryptographic Provider or Microsoft DH SChannel Cryptographic Provider from the Cryptographic service provider drop-down list. By default, IIS 7 uses the Microsoft RSA SChannel Cryptographic Provider.
-
In the Bit length drop-down list, select a bit length that can be used by the provider. By default, the RSA SChannel provider uses a bit length of 1024. The DH SChannel provider uses a bit length of 512. A longer bit length is more secure, but it can affect performance.
-
Click Next.
-
On the File Name page, type a file name in the Specify a file name for the certificate request text box, or click the browse button (…) to locate a file, and then click Finish.
-
Send the certificate request to a public CA.
Command Line
Configuration
WMI
See Also