Follow these steps to generate a CSR on your server. When you have completed generating the CSR, copy and paste it into the CSR field on the SSL certificate request page.

To Generate a CSR in Microsoft IIS 7

1. From the Start menu, go to Administrative Tools and click Internet Services Manager.
2. In the left panel, click the server name where you want to generate the CSR.
3. Double click Server Certificates.
4. In the Actions panel on the right, click Create Certificate Request...
5. Enter Distinguished Name Properties. The following characters cannot be used:
   < > ~ ! @ # $ % ^ * / \ ( ) ?. ,
   • Common Name: The fully-qualified domain name for the certificate. For example, www.coolexample.com. For a wildcard certificate, add an asterisk (*) in the subdomain area (e.g., *.coolexample.com).
   • Organization: The legally registered name of your business. This must match the registrant of the domain name in the certificate request. Enter the requestor's name if you are enrolling as an individual, and the DBA (doing business as) name in the "Organizational Unit" field.
   • Organizational Unit: Optional. If applicable, you may enter the DBA name in this field.
   • City/Locality: The full name of the city where your organization is registered.
   • State/Province: The full name of the state or province where your organization is registered.
   • Country: Select the two-letter International Organization for Standardization- (ISO-) country code for were the organization is legally registered.
6. Click Next.
7. From the Cryptographic service provider menu, select Microsoft RSA SChannel Cryptographic Provider.
8. From the Bit length menu, select 2048.
9. Click Next.
10. Enter a location and file name for the CSR, then click Finish.
11. Open the CSR file, and copy all of the text
    (include ----BEGIN NEW CERTIFICATE REQUEST---- and ----END CERTIFICATE REQUEST----).
12. Paste all of the text into the online request form and complete your application.

After you submit the application, we begin vetting your request. You will receive an email with more information when this process is complete.

NOTE: Bookmark this article and return after your certificate is issued. Download the certificate files and follow the steps below to complete installation on your server.

After your SSL certificate is issued, download your certificate and intermediate certificate files. You must install both files on your server, starting with the intermediate. After you install, assign the certificate to the correct website in IIS.

You can also download the intermediate certificate from the repository.

To Install Your SSL on Microsoft IIS 7

1. From the Start menu, click Run....
2. Type mmc, and then click OK. The Microsoft Management Console (Console) window opens.
3. In the Console window, click the File menu and select Add/Remove Snap-in. The Add or Remove Snap-ins window displays.
4. Select Certificates, and then click Add.
5. Select Computer Account, and then click Next.
6. Select Local Computer, and then click Finish.
7. Click OK.
8. In the Console window, expand the Certificates folder on the left.
9. Right-click Intermediate Certification Authorities, mouse-over All Tasks, then click Import.
10. In the Certificate Import Wizard, click Next.
11. Click Browse to find the intermediate certificate file.
12. Change the file extension filter to PKCS #7 Certificates (*.spc;*.p7b), select the *_iis_intermediates.p7b file, and then click Open.
    

    NOTE: Do not install your Leaf Certificate in this area. Doing so removes your certificate from the list, and you must reinstall to correct the problem.

13. Click Next.
14. Select Place all certificates in the following store.
15. Click Browse, select Intermediate Certification Authorities, and then click Next.
    
16. Click Finish.
    
17. Close the Console window.
18. From the Start menu, go to Administrative Tools and click Internet Services Manager.
19. Click the server name on the left.
20. Double click Server Certificates.
    
21. From the Actions panel on the right, click Complete Certificate Request...
22. Enter the location for the certificate file. The file extension might be .txt or .crt instead of .cer (search for all files).
    
23. Enter a Friendly name for the certificate file, and then click OK.
24. In the Internet Information Services Manager window, select the name of the server where you installed the certificate.
25. Under Sites, select the Website to be secured with the SSL certificate.
26. In the Actions panel on the right, click Bindings...
27. Click Add...
28. In Add Website Binding:
    • For Type, select https.
    • For IP address, select All Unassigned, or the IP address of the Website.
    • For Port, type 443.
    • Select the SSL certificate you just installed, and then click OK.
29. Click Close.
30. Close the Internet Information Services (IIS) Manager.

Your SSL Certificate is installed. Visit your website with HTTPS to verify the installation. If you have problems, please see Using the SSL Installation Tool to help diagnose issues.