Certificate Signing Request (CSR) Help
For Microsoft IIS 10


Here are the steps to create a CSR using Microsoft IIS 10

1. Launch the Server Manager
-  From within the Server Manager at the top right corner Select: Tools | Internet Information Services (IIS) Manager





2. From the left hand side under " Connections" select the workstations name
- Once the name is selected, look to the center of the screen and locate "Server Certificates" once selected double click



3. Once in the "Server Certificates" to the upper right hand side under "Actions" select : Create Certificate Request...



4. After selecting "Create Certificate Request..." you will now be prompted with the "Certificate Request" wizard
- Fill in the information as prompted by the wizard
- Common name: Enter the Fully Qualified Domain Name that you wish to secure in the SSL certificate

Please Note: If you are issuing a CSR for a Multi-Domain certificate and are wondering how to add SAN's, you will not be prompted in the wizard and will manually need to enter them on Entrust.net when placing your request for the certificate.



Organization Name: Enter the full legal name for your Organization name
Organization Unit: This is a non mandatory field. OU must be approved by Entrust. Traditionally used to specify a department.
City/Location: Provide the location of where the Server is located that you will be installing the certificate on
State/Province: Provide the State/Province of where the Server is located that you will be installing the certificate on
Country: Provide the Country of where the Server is located that you will be installing the certificate on

Once you have provided the above information continue to the next page of the Wizard by Selecting Next

5. Leave the default selection for "Cryptographic s ervice provider:" as "Microsoft RSA SChannel Cryptographic Provider"
- For " B it length" you must select a minimum of 2048
- Please Note: 1024 bit CSR's are no longer supported by Public CA's
- Once done Select: Next



6. Provide a save location for the CSR file. Make sure to take note of where you are saving the file as you will need to open the file in Note Pad to submit your Certificate Request to Entrust.net

7. Locate the CSR text file and view it in Note Pad
- Select All including: -----BEGIN CERTIFICATE REQUEST----- and -----END CERTIFICATE REQUEST-----
- Paste the content online at Entrust.net

If you have any questions or concerns please contact the Entrust Certificate Services support department for further assistance.

Hours of Operation:
Sunday 8:00 PM ET to Friday 8:00 PM ET
North America (toll free): 1-866-267-9297
Outside North America: 1-613-270-2680 (or see the list below)
NOTE: It is very important that international callers dial the UITF format exactly as indicated. Do not dial an extra "1" before the "800" or your call will not be accepted as an UITF toll free call.