Microsoft IIS 4.x

Important Note:

Effective 1 January 2011, we will no longer support any Certificate Signing Request [CSR] generated with a 1024 bit key. This is because NIST, PKIX, WebTrust and other respective security standards no longer consider the 1024 bit key size as secure. Read more > [1]

Instructions

A CSR is a file containing your certificate application information, including your Public Key. Generate your CSR and then copy and paste the CSR file into the web form in the enrolment process:

Generate keys and certificate:

• Open the Microsoft Management Console (MMC) for IIS (available in the Windows NT 4.0 Option Pack > Microsoft Internet Information Server > Internet Service Manager.
• In the MMC, Expand the Internet Information Server folder and expand the computer name
• Open the properties window for the website the CSR is for. You can do this by right clicking on the website
• Open Directory Security Folder
• In the Secure Communications area of this Property Sheet, select the Key Manager button and select "Create New Key..."
• Choose "Put the request in a file that you will send to an authority." Select an appropriate filename (or accept the default).
• Fill in the appropriate details:
• Fill in all the fields; do not use the following characters:
  ! @ # $ % ^ * ( ) ~ ? > < & / \
  Note: If your server is 256 bit enabled, you will generate a 2048 bit key
  If your server is 256 bit you can generate up to 2048 bit keys
• Click Next until you finish
• Click Finish
• Key Manager will display a key icon under the WWW icon. The key will have an orange slash through it indicating it is not complete. Choose the "Computers" menu and select Exit. Select YES when asked to commit changes
• When you make your application, make sure you include this file (this is your CSR) in its entirety into the appropriate section of the enrolment form - including

-----BEGIN CERTIFICATE REQUEST-----to-----END CERTIFICATE REQUEST-----

• Click Next
• Confirm your details in the enrolment form
• Finish

We recommend that you make a note of your password and backup your key, as only you know these, so if you loose them we can't help! A floppy diskette or other removable media is recommended for your backup files