Enabling SSL communication security on IIS 5.x web server

To enable the SSL facility on your website using IIS 5.x, a Digi-SSL™ certificate is necessary. To obtain your Digi-SSL™ certificate, a Certificate Signing Request [CSR] is required. A CSR is your server's unique "fingerprint" and is generated from your server.

The next section will explain in detail how to generate a CSR.

1.1 Generating a Certificate Signing Request (CSR) using Microsoft IIS 5.x

To generate keys (private and public) and Certificate Signing Request:

Go to Windows Administrative Tools.

• Start Internet Services Manager.









• Open the properties window for the website the CSR is going to be generated for. You can do this by right clicking on the Default Website and selecting Properties from the menu.
• Open Directory Security by right clicking on the Directory Security tab.









• Click Server Certificate. The Wizard will appear.









• Click Create a new certificate and click Next.









• Select Prepare the request… and click Next.









• Provide a name for the certificate; this needs to be easily identifiable if you are working with multiple domains. This is for your records only.
• If your server is 256 bit enabled, you will generate a 2048 bit key. If your server is 128 bit, you can generate up to 1024 bit keys. We recommend you stay with the default of 1024 bit key if the option is available. Click Next.