IIS 8 and IIS 8.5 SSL Certificate CSR Creation

For a simple way to renew your certificate for IIS 8, see Microsoft IIS 8 and IIS 8.5: SSL Certificate Renewal Using the DigiCert® Certificate Utility for Windows.

How to Generate an SSL Certificate Renewal CSR in Microsoft IIS 8 and IIS 8.5

  1. Open Internet Information Services (IIS) Manager.

    From the Start screen, type and click Internet Information Services (IIS) Manager.

  2. In Internet Information Services (IIS) Manager, under Connections, click your server's Hostname.

  3. In the center menu, in the IIS section, double-click the Server Certificates icon.

    IIS Manager Server Certificates

  4. In the Actions menu, click Create Certificate Request to open the Request Certificate wizard.

    IIS Manager Create Certificate Request

  5. On the Distinguished Name Properties page, enter the following information:

    Common name Enter the name that will be used to access the certificate. This name is usually the fully-qualified domain name.
    For example, www.domain.com or mail.domain.com.
    Organization Enter the legally registered name of your organization/company.
    Organizational Unit Enter the name of your department within the organization. For example, you can enter IT or Web Security.
    You can also leave the text box blank.
    City/locality Enter the city in which your organization/company is located.
    State/province Enter the state/province in which your organization/company is located.
    Country/region Type or select your two-digit country code from the drop-down list.
    If necessary, you can find your two-digit country code in our SSL Certificate Country Codes list.

    Request Certificate wizard

  6. Click Next.

  7. On the Cryptographic Service Provider Properties page, enter the following information:

    Cryptographic service provider In the drop-down list, select Microsoft RSA SChannel..., unless you have a specific cryptographic provider.
    Bit length In the drop-down list, select 2048.

    Request Certificate wizard

  8. Click Next.

  9. On the File Name page, click the box to browse to a location where you want to save the CSR file, enter the filename, and then click Open.

    Request Certificate wizard

    If you only enter the filename without selecting a location, your CSR file is saved to the following location: C:\Windows\System32.

    Make sure to note the filename and the location where you saved your CSR file. You need to open this file as a text file, copy the entire body of the text file (including the Begin New Certificate Request and End New Certificate Request tags), and paste it into the online order process when you are prompted.

  10. Click Finish.

  11. Next, log into the DigiCert® Management Console.

  12. Under Order next to the order that you want to renew, click + to expand the options for the order and then, click Renew.

    DigiCert Certificate Manager

  13. Follow the instructions to place the order with DigiCert to renew your SSL Certificate.

SSL Certificate Renewal Installation: Microsoft IIS 8 and IIS 8.5

Installation Instructions to Renew your SSL Certificate: Windows 2012 Server

  1. Save your certificate file to the IIS server from which the CSR was generated.

  2. Open Internet Information Services (IIS) Manager.

    From the Start screen, type and then click Internet Information Services (IIS) Manager.

  3. In Internet Information Services (IIS) Manager, under Connections, click your server's Hostname.

  4. In the center menu, in the IIS section, double-click the Server Certificates icon.

    IIS Manager Server Certificates

  5. In the Actions menu, click Complete Certificate Request to open the Complete Request Certificate wizard and complete your request.

    IIS Manager Create Certificate Request

  6. On the Specify Certificate Authority Response page, under File name containing the certification authority’s response, click the box to browse to the .cer certificate file that DigiCert sent you, select the file, and then click Open.

    IIS Manager Complete Certificate Request

  7. Next, enter the following information:

    Friendly name Enter a friendly name for the certificate. You will use this name to identify this certificate.
    We recommend that you add DigiCert and the expiration date to the end of your friendly name, for example: yoursite-DigiCert-Nov2015.
    This information helps identify the issuer and expiration date for each certificate. It also helps distinguish multiple certificates with the same domain name.
    Select a certificate store... In the drop-down list, select a certificate store.
  8. Click OK.

  9. In Internet Information Services (IIS) Manager, under Connections, expand your server’s name, expand Sites, and then select the site on which you want to enable SSL.

    IIS Manager

  10. In the Actions menu, under Edit Site, click Bindings.

  11. In the Site Bindings window, select binding for https, and then click Edit.

    IIS Manager Site Binding Window

  12. In the Edit Site Binding window, in the SSL certificate drop-down list, select your newly installed SSL Certificate by its friendly name, and then click OK.

    IIS Manager Edit Site Binding Window

  13. Your new SSL Certificate should now be installed to your server.

Installation or Troubleshooting Help

For help with your SSL Certificate installation or troubleshooting, use our DigiCert® Certificate Utility for Windows.

Test Your Installation

If your web site is publicly accessible, our DigiCert® SSL Installation Diagnostics Tool can help you diagnose common problems.

IIS 8 SSL Certificates, Guides, & Tutorials

Buy Now Learn More