SSL 247 are authorised strategic resellers of Verisign,GlobalSign, Geotrust and RapidSSL products

Microsoft IIS 4.0 - Internet Information Services 4.0

Follow these instructions to generate a CSR for your Web site. When you have completed this process, you will have a CSR ready to submit to ssl247.co.uk in order to be generated into a SSL Security Certificate.

You must have Service Pack 4 or higher, or MS Internet Explorer 5 and higher

1. Open the Key Manager. Go to the Key menu and select Create New Key
2. Select Put the request in a file that you will send to an authority. Enter a file and path in the text box that you will remember.
   Example: C:\NewKeyRq.txt.
   Click Next
   
   
3. Enter your key name as specified in the previous step. Enter and confirm a password.
   
   Warning: If you lose the password, you must purchase another certificate.
   
   
4. When creating a CSR you must follow these conventions.
   Enter the Distinguished Name Field information.
   The following characters can not be accepted: < > ~ ! @ # $ % ^ * / \ ( ) ?&.
   
   Distinguished Name Field Explanation
   
   Common Name
   
   The fully qualified domain name for your web server. This must be an exact match.
   example: If you intend to secure the URL https://www.yourdomain.com, then your CSR's common name must be www.yourdomain.com.
   
   Organization
   
   The exact legal name of your organization. Do not abbreviate your organization name.
   example: Your Company, Inc.
   
   Organization Unit
   
   Section of the organization
   example: Marketing
   
   City or Locality
   
   The city where your organization is legally located.
   example: Atlanta
   
   State/Province
   
   The state or province where your organization is legally located. Can not be abbreviated.
   example: Georgia
   
   Country
   
   The two-letter ISO abbreviation for your country. Please click here for the complete list of ISO country codes..
   example: US = United States, GB = United Kingdom
   
   Administrator Name
   
   Contact Name
   example: John Smith
   
   Email Address
   
   Contact Email
   example: john.smith@yourdomain.com
   
   Phone Number
   
   Contact Phone
   example: 555-555-1212
   
   
5. After you close out of the key manager, click on Yes to Commit all Changes
   
   Warning: If you do not click yes, your private key will not be saved and your certificate will not install.
   
   
6. You are now ready to submit your CSR for the certificate you wish to install:
   • FreeSSL
   • RapidSSL™
   • RapidSSL Pro™
   • RapidSSL Pro Wildcard™
   • GeoTrust QuickSSL Premium™
   • Geotrust True BusinessID®
   • Geotrust True BusinessID® Wildcard
   • GeoTrust PowerServer ID™
   • GlobalSign Domain ServerSign™
   • GlobalSign Domain ServerSign™ Wildcard
   • GlobalSign Extended ServerSign™
   • GlobalSign Organization ServerSign™
   • GlobalSign Organization ServerSign™ with IP
   • GlobalSign Organization ServerSign™ Wildcard
   • GlobalSign Organization ServerSign™ with SAN
   • VeriSign Secure Site
   • VeriSign Secure Site Pro
   • VeriSign Secure Site Pro with EV
   
   Note: Remember to back up your key pair file.

The Server Gated Cryptographic extension can be enabled or disabled from the registry.

Check the registry key: HKEY_LOCAL_MACHINE\system\CurrentControlSet\Control\SecurityProviders\ SCHANNEL

By default, there is no value or key for EnableSGC. You have to add it in order to support SGC, and you would set the value to 1 - that is, you would create a new key "EnableSGC" and set its value to 1. If the "EnableSGC" key already exists, just set EnableSGC=0.

See also the following Microsoft articles:

http://support.microsoft.com/default.aspx?scid=kb;en-us;Q234271
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q194889
http://support.microsoft.com/default.aspx?scid=kb;EN-US;q239449
http://support.microsoft.com/default.aspx?scid=kb;EN-US;q249863