SharePoint 2013: Using Microsoft IIS 8 for CSR Creation

SharePoint 2013

Microsoft SharePoint 2013 does not include a GUI for creating a CSR. Because SharePoint 2013 is designed to run on Microsoft IIS 8, you can use IIS 8 to create your CSR.

  • For a simple way to create a CSR that works on any Microsoft server platform, you can use the DigiCert® Certificate Utility for Windows. See CSR Creation Instructions for Microsoft Servers. For more information about this utility, see DigiCert® Certificate Utility for Windows.

  • If you already have your SSL Certificate and just need to install it, see Microsoft SharePoint 2013: SSL Certificate Installation Instructions.

  • If you have any questions, or would like expert help with your installation, feel free to chat with an SSL expert - they are ready to help regardless of where you purchased your SSL certificate.

  • SharePoint 2013: How To Create a CSR Using Microsoft IIS 8

    1. Open Internet Information Services (IIS) Manager.

      From the Start screen, type and click Internet Information Services (IIS) Manager.

    2. In Internet Information Services (IIS) Manager, under Connections, select your server’s Hostname.

      IIS 8 Security Certificates

    3. In the center menu, in the IIS section, double-click the Server Certificates icon.

    4. In the Actions menu, click Create Certificate Request to open the Request Certificate wizard.

      IIS 8 Create Certificate Request

    5. On the Distinguished Name Properties page, enter the following information and then, click Next:

      Common name: Enter the name to be used to access the certificate. This name is usually the fully qualified domain name.
      For example, www.domain.com or mail.domain.com.
      Organization: Enter the legally registered name of your organization/company.
      Organizational Unit: Enter the name of your department within the organization. For example, you can enter IT or Web Security.
      You can also leave the text box blank.
      City/locality: Enter the city in which your organization/company is located.
      State/province: Enter the state/province in which your organization/company is located.
      Country/region: Type or select your two-digit country code from the drop-down list.
      If necessary, you can find your two-digit country code in our SSL Certificate Country Codes list.

      IIS 8 Distinguished Name Properties

    6. On the Cryptographic Service Provider Properties page, enter the following information and then, click Next:

      Cryptographic service provider: In the drop-down list, select Microsoft RSA SChannel Cryptographic Provider,
      unless you have a specific cryptographic provider.
      Bit length: In the drop-down list, select 2048.

      IIS 8 Cryptographic Service Provider Properties

    7. On the File Name page, click the box to browse to a location where you want to save the CSR file, enter the filename, and then, click Open.

      Note:  If you only enter the filename without selecting a location, your CSR file is saved to the following location: C:\Windows\System32.

      IIS 8 CSR Pending Request Filename

    8. Make sure to note the filename and the location where you saved your CSR file.

      You need to open this file as a text file, copy the entire body of the text file (including the Begin New Certificate Request and End New Certificate Request tags), and paste it into the online order process when you are prompted.

    9. Click Finish.

    10. After you receive your SSL Certificate from DigiCert, you can install it.

      See Microsoft SharePoint 2013: SSL Certificate Installation Instructions.