Before you can generate a CSR, you need to make sure that IIS (Internet Information Services) is installed on your computer. To figure out if IIS is already installed on your computer, follow the steps below.
1) Hold the Windows icon and press R.
2) Type inetmgr and click OK
3) If no results pull up, that means you'll need to install IIS. Follow the steps below to install IIS on your windows. It's very simple! We promise!
How to install IIS
1) Go to your Control Panel and select Programs - also called Programs and Features on some versions.
2) On the left hand side, click on the link “Turn Windows features on or off”.
3) As a result you should get a “Windows Features” popup. Find Internet Information Services and expand it. Select the boxes shown below and then click OK.
4) That’s it! Windows will automatically install it.
You've successfully installed IIS on your Windows computer and you can now move forward with generating the CSR!
How to generate the CSR
1) Hold the Windows icon and press R.
2) Type inetmgr and click OK
3) Open Server Certificates
4) Right click and select Create Certificate Request or select it from the link options on the right of the screen.
5) Enter your domain in the Common name field and Organization field. Make sure you do not include www in your domain name. Fill in the rest of the fields EXACTLY like the example below, then click Next.
6) On the next screen, make sure that Microsoft RSA SChannel Cryptographic Provider is selected as the Cryptographic Service Provider and 2048 is selected as the Bit length. Click Next.
7) Click on the ellipses (...) and select the file or area where you want to save your CSR file. Make sure you save it somewhere where you can easily find it, like your Desktop. Enter a name for your CSR file under File name. Make sure the file is being saved as .txt
Then click Open
8) You should see the file name filled out in the File Name screen. Click Finish to complete.
9) Now that you've generated and saved your CSR, you'll need to login to the account from which you purchased your SSL Certificate from. If you purchased your SSL Certificate from the same company that you purchased your domain from, then you'll need to login to that account. SSL Certificate setup will almost be identical per company. Please keep in mind that the location of the configuration for the SSL certificate will heavily depend on the company providing the SSL certificate.
10) Find the section where your purchased SSL Certificate is located. Click on the Set up option. Below is an example of this section on GoDaddy:
11) You should be directed to a page that looks similar to this where it asks you to paste your CSR in the field.
12) Now, open your CSR file - it'll look like the below example.
13) Copy and paste it into the field. Agree to the terms and conditions and submit.
14) After you've submitted your SSL Request, you'll need to wait for the approval email. This can take up to 24 hours, but it typically only takes as little as 10 minutes.
Once you receive the approval email, follow the link in the email to download your SSL Certificate. DO NOT follow any other steps that are provided in the confirmation email; just download your SSL Certificate.
15) When you download your SSL Certificate, it should download as a .crt file, however it may download as a zip file. If it downloads as as zip file, click on the down arrow and select Show in folder.
You'll see the zip file in your Downloads folder. Right click on the zip file and select Extract All...
Click on Browse and then select the folder where you want the extracted documents to be saved. Make sure you save them in a folder where you can easily find them, like a folder on your desktop. Click on Select Folder once you've made your selection.
Click Extract to complete. This should open the folder where you saved the extracted files. You'll only be using the file labeled Security Certificate under Type.
Continue following the steps below to generate the PFX. You're almost done!
How to generate the PFX
1) You'll need to go back into IIS on your computer and Complete Certificate Request.
Hold the Windows icon and press R.
2) Type inetmgr and click OK
3) Open Server Certificates
4) Right click and this time, select Complete Certificate Request
5) Click on the ellipses (...) and find the Security Certificate .crt file that you had extracted in Step 15.
You may need to switch the file type per the below example if you don't see the Security Certificate where you had saved it:
Select the Security Certificate file and click Open
6) Enter a name of your choice under Friendly Name and select Web Hosting as the certificate store then click OK
7) Now, you should see your domain name appear on the Server Certificates list.
8) Select the line, right click and select Export
9) Click on the ellipses (...), select the folder where you want to save the file. Name the file whatever you'd like under File name, make sure *.pfx is the format and then click Open
10) Under Password enter Test1234! and repeat in the Confirm Password field. Click OK
11) The .pfx file will be located in the folder you saved it in. Make sure you remember where you saved the file as you will need to submit it as part of the final step to the domain connection process.
You have successfully completed generating the CSR and PFX files for the initial SSL Certificate setup! You're ready to move onto the final step in the Domain Connection process. You now need to submit the PFX file to our Support team!
Comments
0 comments
Please sign in to leave a comment.