How to Generate a Windows Certificate Signing Request
  1. Access your Windows Server desktop. This is generally done remotely using a program like Terminal Services
  2. From the Start Menu, select Programs, then Administrative Tools, then Internet Services Manager (IIS)
  3. Expand the server's list of web sites and locate the web site domain to which the secure certificate will be applied
  4. Right click on the domain name, select Properties
  5. Click the Directory Security tab
  6. Under Secure Communications, click the Server Certificate button. This will open the Web Server Certificate Wizard
  7. Click Next
  8. Select Create a new certificate, and click Next
  9. Select Prepare the request, but send it later and click Next
  10. Provide a name for the certificate, this needs to be easily identifiable if you are working with multiple domains. This is for your records only.
  11. Select a Bit Length. If your server is 40 bit enabled, generate a 512 bit key. If your server is 128 bit you can generate up to a 1024 bit key. We recommend you stay with the default of 1024 bit key if the option is available. Click Next
  12. Enter the name of your Organization and Organization Unit. These are your company name and department respectively (e.g. WhatHelps?, Inc., Server Administration Dept). Click Next.
  13. The Common Name field should be the Fully Qualified Domain Name (FQDN) or the web address for which you plan to use your Certificate, e.g. the area of your site you wish customers to connect to using SSL. For example, an SSL Certificate issued for webhelps.com will not be valid for pages at http://secure.webhelps.com or even at http://www.webhelps.com. They will only be valid for pages at http://webhelps.com. Click Next.
  14. Enter your country, state and city. Click Next.
  15. Enter a filename and browse for the location on the server to save your CSR file. The filename and location are unimportant, so use something you can easily find. Click Next.
  16. Check the details you have entered. If you have made a mistake click Back and make your changes. Be especially sure to check the domain name the Certificate is to be "Issued To". Your Certificate will only work on this domain. Click Next when you are satisfied the details are absolutely correct.
  17. Locate the saved CSR on the server and open it with Notepad. Copy the entire CSR.
  18. When you copy/paste the CSR into the SSL Certificate purchase form, make sure you include the entire CSR, including
    ---BEGIN CERTIFICATE REQUEST---to---END CERTIFICATE REQUEST---