 |
|
Managed PKI for SSL Support
|
CSR Generation for Microsoft IIS 6.0
To generate a CSR, you need to create a key
pair for your server. These two items comprise a digital certificate
key pair and cannot be separated. If you lose your public/private key
file or your password and generate a new one, your SSL Certificate will
no longer match. You will have to request a new SSL Certificate from
your Managed PKI for SSL Administrator.
VeriSign recommends that you contact the Microsoft
IIS 6.0 vendor for additional information.
Generate a Private Key and Certificate Signing
Request
- Under
Administrative Tools, open Internet Services Manager.
- Open
the properties window by right-clicking on the name of the Web site
you wish to secure.
- Click
on the Directory
Security tab.
- Click
on Server
Certificate in the secure communications section. If you have
not used this option before, the Edit button will not be active.
- Select Create a new
certificate.
- Select Prepare the
request now, but send it later. Use your Managed PKI for SSL
enrolment pages to send your CSR, not email.
- Complete
the information requested by the IIS Certificate Wizard to create a
private key that is stored locally on your server and a public key (the
Certificate Signing Request) for the enrolment process. You have now
created a public/private key pair.
- Click
on Finish
to exit the IIS Certificate Wizard. A CSR file has been generated.
- To copy
and paste the information into the enrolment form, open the file in
a text editor that does not add extra characters (Notepad or Vi are
recommended).
- Go to
your MPKI for SSL enrolment pages. (Your administrator will provide
you with this URL.)
Terms Defined
Common Name
The Common Name is the Host + Domain Name.
It looks like "www.company.co.uk" or "company.co.uk".
VeriSign certificates can only be used on Web
servers using the Common Name specified during enrolment. For example,
a certificate for the domain "domain.co.uk" will receive a
warning if accessing a site named "www.domain.co.uk" or "secure.domain.co.uk",
because "www.domain.co.uk" and "secure.domain.co.uk"
are different from "domain.co.uk".
Organisation Information
- If your company
or department has an &, @, or any other symbol using the shift key
in its name, you must spell out the symbol or omit it to enrol.
- The “Org Unit” field
is the name of the department or organisation unit making the request.
- The Locality field
is the city or town name, for example: Guildford.
- Do not abbreviate
the county name, for example: Surrey.
- Use the two-letter
code without punctuation for country, for example: GB.
Contact Information
Your Managed PKI for SSL Administrator will
be responsible for issuing the certificate to you after your enrolment
has been completed. Please contact them for assistance.
|
|
|
