Generate a CSR for Microsoft Internet Information Server 4.0
Follow these instructions to generate a CSR for your web site.
You must have Service Pack 4 or higher, or MS Internet Explorer 5 and higher.
- Open the Key Manager. Go to the Key menu and select Create New Key.
- Select Put the request in a file that you will send to an authority. Enter a file and path in the text box. Click Next.
- Enter your key name as specified in the previous step. Enter and confirm a password.
Warning: If you lose the password, you must purchase another certificate.
- Enter your Distinguished Name Field information. More information on the fields is available here.
- After you close out of the key manager, click on Yes to Commit all Changes.
Warning: If you do not click yes, your private key will not be saved and your certificate will not install.
- Copy the CSR and use it to buy your certificate online.
Remember to back up your key pair file.
The Server Gated Cryptographic extension can be enabled or disabled from the registry.
Check the registry key: HKEY_LOCAL_MACHINE\system\CurrentControlSet\Control\SecurityProviders\SCHANNEL
By default, there is no value or key for EnableSGC. You have to add it in order to support SGC, and you would set the value to 1 - that is, you would create a new key "EnableSGC" and set its value to 1. If the "EnableSGC" key already exists, just set EnableSGC=0.
See also the following Microsoft articles:
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q234271
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q194889
http://support.microsoft.com/default.aspx?scid=kb;EN-US;q239449
http://support.microsoft.com/default.aspx?scid=kb;EN-US;q249863
|