Knowledgebase

Microsoft IIS 5.x & 6.x (extended version)  Print this Article

Generate Certificate Signing Request (without removing the current certificate):

Currently the Renew option within IIS 5.x/6.x does not work as intended. Since IIS does not allow your site that is currently running SSL to generate a Certificate Signing Request (CSR) without removing the existing certificate. For most sites this is not a viable option since the SSL portion of your site would be down until the new certificate was put in place. In order to obtain a certificate for your existing web site you will have to do the following:

(In Admin IIS)

Create a Temporary site within IIS.

Right-Click on the newly created site and click Properties.



Click the Directory Security tab and then click Server Certificate button.

(Enter Server Certificate Wizard):

Go through the wizard and enter the exact same information you would/have on your existing certificate.

Send us the CSR.

Install the certificate by processing the pending request on the Temporary site.

(On the production website) Right-Click on the Production site and click Properties.

Click the Directory Security tab and then click Server Certificate button.

(Enter Server Certificate Wizard on production website):

Select Replace the current certificate and click Next.

Click Next until you are out of the wizard. Note: A typical site is bound to https on port 443 with a unique IP Address.

Delete the Temporary Site.

Was this answer helpful?

Related Articles

What is CSR and who needs it?
A Certificate Signing Request is a text generated on the server that is used to create your SSL...
Apache/OpenSSL
To generate a pair of private key and public Certificate Signing Request (CSR) for a webserver,...
Apache (with mod_ssl)
Installing SSL certificate on Apache with mod_ssl To install certificate you need 2...
Apache (Multi-Domain version)
To generate CSR file which includes more than one Fully Qualified Domain Name, you need to...
Apple Mac OS X Server
CSR is generated in 2 steps.I. Private key generation1. Log into server and open...