If you already have your SSL Certificate and just need to install it, see Amazon Web Services: SSL Certificate Installation.

Amazon Web Service (AWS): Using the DigiCert Certificate Utility for CSR Creation

If you are looking for a simpler way to generate your AWS certificate signing request (CSR) that works on any Microsoft server platform, you can use the DigiCert® Certificate Utility for Windows. For more information about this utility, see DigiCert® Certificate Utility for Windows.

After you use the utility to generate your CSR, you use it to install your SSL Certificate on your Windows server. Next, you use the utility to export your certificate in Apache compatible format. Finally, you use the AWS Management Console to upload and implement the certificate.

Amazon Web Service (AWS): How to Create Your CSR with the DigiCert Certificate Utility

  1. On your Windows server, download and save the DigiCert® Certificate Utility for Windows executable (DigiCertUtil.exe).

  2. Run the DigiCert® Certificate Utility for Windows.

    Double-click DigiCertUtil.

  3. In the DigiCert Certificate Utility for Windows©, click SSL (gold lock), and then, click Create CSR.

    Utility Create CSR

  4. On the Create CSR page, enter the following information:

    Certificate Type: Select SSL.
     
    Common Name: Enter the fully qualified domain name (i.e. www.example.com).
    You may also enter the IP address.
     
    Subject Alternative Names: If you are requesting a Multi-Domain (SAN) Certificate, enter any SANs that you want to include.
    (e.g., www.example.com, www.example2.com, and www.example3.net)
     
    Organization: Enter your company’s legally registered name (e.g., YourCompany, Inc.).
     
    Department: (Optional) Enter the department within your organization that you want to appear on the SSL Certificate.
     
    City: Enter the city where your company is legally located.
     
    State: In the drop-down list, select the state where your company is legally located.
    If your company is located outside the USA, you can enter the applicable name in the box.
     
    Country: In the drop-down list, select the country where your company is legally located.
     
    Key Size: In the drop-down list, select 2048. We recommend that you use 2048 bits because it is more secure.
     
    Provider: In the drop-down list, select Microsoft RSA SChannel Cryptographic Provider,
    unless you have a specific cryptographic provider.

    Enter CSR Details

  5. Click Generate.

  6. On DigiCert Certificate Utility for Windows® - Create CSR page, do one of the following, and then, click Close:

    Click Copy CSR. Copies the certificate contents to the clipboard.
    If you use this option, we recommend that you paste the CSR into a tool such as Notepad.
    If you forget and copy some other item, you still have access to the CSR, and you do not have to go back and recreate it.
     
    Click Save to File. Saves the CSR as a .txt file to the Windows server.
    We recommend that you use this option.

    Copy CSR

  7. Open the CSR file with a text editor and copy and paste it (including the BEGIN NEW CERTIFICATE REQUEST and END NEW CERTIFICATE REQUEST tags) into the DigiCert Certificate order form.

    Ready to Order Your SSL Certificate

    Buy Now Learn More
  8. After you receive your SSL Certificate from DigiCert, you can install it.

    See Amazon Web Services: SSL Certificate Installation.