IIS 7 SSL Certificate CSR Creation and renewal

IIS 7 SSL Certificate CSR Creation

IIS 7 SSL Certificate CSR Creation

Easy IIS 7 SSL Certificate Renewal

For a very simple way of renewing your certificate for IIS 7

How to Generate an SSL Certificate Renewal CSR in Microsoft IIS 7

1. Open the IIS Manager by going to Start > Administrative Tools > Internet Information Services (IIS) Manager.
2. Under Connections click your server's Host name.
3. In the center window pane, scroll down to and Double-Click the Server Certificates icon.  

4. On the right window pane under Actions click the link to Create Certificate Request.... 
5. 

5. Enter the following information in the "Distinguished Name Properties" and click Next:
   
   Common Name - Typically the domain (e.g. www.yourdomain.com) computers will connect to this server with.
   Organization -    Your organizations or company's legally registered name (e.g. Your Company, LLC; Your Company, Inc.)
   Organizational unit - Your organization's department name (If you don't know what to put just enter 'IT').
   City/locality -     The city/municipality where your organization is located.
   State/province - The state where your organization is located.
   Country/region - Your country's 

6. Choose Microsoft RSA SChannel and 2048 and then click Next. 

7. Save your CSR file to a location. Then open this file in in Wordpad, hit (Ctrl+A) and (Ctrl+V) to select all and copy the contents to the clipboard.
   
   
8. Under the "My Orders" tab, click + to expand the options for order you would like to renew, then click the Renew link.
   
   

SSL Certificate Renewal Installation in Microsoft IIS 7

Installation Instructions to Renew your Windows 2008 Server SSL Certificate

1. Save your certificate file to the IIS server that the CSR request was generated from.
2. Open the IIS Manager and on the left side click on your server's name, and in the center window pane scroll down to Server Certificates and open it.

3. Now under Actions pane click to Complete Certificate Request...

4. Click ... to browse to the .CER certificate file xyz sent you, and give the certificate a Friendly Name to help you refer to this certificate by in the future and click Ok.
   
   Note: You may receive the following error messages when installing the certificates:
   "Cannot find the certificate request associated with this certificate file. A certificate request must be completed on the computer where it was created." "ASN1 bad tag value met".
   
   If you created the CSR (AKA pending request) for the certificate you are installing you can ignore this error, close the dialog box and hit the "F5" key to update the list of available installed certificates.
   If you can see your certificte with the friendly name you just assigned, click to go to the next step.
   
   

5. Under the Connections window pane, expand your server's computer name, then click the Site that you want to enable SSL on.
6. In the Actions menu click Bindings... then select the binding for https and click 'Edit'.

7. In the 'SSL certificate:' drop-down menu select your newly-installed SSL Certificate by its friendly name, and click Ok.

Your new SSL Certificate should now be installed to your server.

Test Your Installation