Search Support
contact us

Let Us Make it Easy for You. Call 1-877-898-3290 for MyTime Support™. Learn More

Generating a Certificate Signing Request or CSR Topics

Article Rating: 2 / 5 Votes: 26

CSR for IIS Without Removing Your Current Certificate

Instructions on how to create a CSR for IIS without removing your current SSL Certificate:

The renewal request option within IIS 5.0/6.0 does not create a request in a PKCS10 format. IIS 5.0/6.0 does not allow your site that is currently running SSL to generate a certificate signing request (CSR) without removing the existing certificate. For most sites this is not an option since your site will not be able to run a SSL session while your certificate is being processed. To obtain a certificate for your existing Web site you will have to do the following.

Please read and print these instructions before submitting your new certificate request.

1.       Leave your existing site that currently has the certificate installed alone.

2.       Create another virtual site within IIS (this does not have to be a functional site).

3.       Enter Properties for the newly created virtual site, then go to the Certificate Wizard to create a new certificate request. The information you enter on this certificate request should match exactly the information on your production certificate, since that is the existing certificate this new CSR will replace.

4.       Install this certificate into your new virtual site; follow the process the pending request by selecting the certificate file we sent you. Complete the installation of your new certificate into your virtual Web site.

5.       Now delete the new virtual site!

6.       Go to your Production Web site, enter Properties, and select Replace the current certificate - choose the new certificate from the list.

7.       Make sure you bind the Web site to a unique IP address at https Port 443, then Stop and then Start your Web site. Your new certificate should be installed.

When convenient, go into your MMC console (with Certificate snap-in added) and delete the old certificate.