Office 365: Using Microsoft IIS for CSR Creation
Microsoft Office 365 doesn’t include a GUI for creating a CSR. Because Office 365 is designed to run on Microsoft IIS, you can use IIS to create your CSR.
-
For IIS 8/8.5 instructions, see Office 365: How to Create a CSR Using IIS 8/8.5.
-
For IIS 7 instructions, see Office 365: How to Create a CSR Using IIS 7.
If you already have your SSL Certificate and just need to install it, see Microsoft Office 365: SSL Certificate Installation (IIS).
For a simple way to create a CSR that works on any Microsoft server platform, you can use the DigiCert® ®Certificate Utility for Windows. See CSR Creation Instructions for Microsoft Servers. For more information about this utility, see DigiCert® Certificate Utility for Windows.
Office 365: How to Create a CSR Using IIS 8/8.5
-
On your AD FS server, open Internet Information Services (IIS) Manager.
From the Start screen, type and click Internet Information Services (IIS) Manager.
-
In Internet Information Services (IIS) Manager, under Connections, select your server’s Hostname.
-
In the center menu, in the IIS section, double-click the Server Certificates icon.
-
In the Actions menu, click Create Certificate Request to open the Request Certificate wizard.
-
In the Request Certificate wizard, on the Distinguished Name Properties page, enter the following information and then, click Next:
Common name: Enter the name to be used to access the certificate. Make sure that the common name matches your AD FS server farm name. Microsoft recommends using the host name STS (secure token service). For example, sts.domain.com, Organization: Enter the legally registered name of your organization/company. Organizational Unit: Enter the name of your department within the organization. For example, you can enter IT or Web Security. You can also leave the text box blank. City/locality: Enter the city in which your organization/company is located. State/province: Enter the state/province in which your organization/company is located. Country/region: Type or select your two-digit country code from the drop-down list. If necessary, you can find your two-digit country code in our SSL Certificate Country Codes list. 
-
On the Cryptographic Service Provider Properties page, enter the following information and then, click Next:
Cryptographic service provider: In the drop-down list, select Microsoft RSA SChannel Cryptographic Provider, unless you have a specific cryptographic provider. Bit length: In the drop-down list, select 2048. 
-
On the File Name page, click … to browse to a location where you want to save the CSR file, enter the filename, and then, click Open.
Note: If you only enter the filename without selecting a location, your CSR file is saved to the following location: C:\Windows\System32.
-
Make sure to note the filename and the location where you saved your CSR file.
You need to open this file as a text file, copy the entire body of the text file (including the Begin New Certificate Request and End New Certificate Request tags), and paste it into the online order process when you are prompted.
-
Click Finish.
-
After you receive your SSL Certificate from DigiCert, you can install it.
See Microsoft Office 365: SSL Certificate Installation (IIS).
Office 365: How to Create a CSR Using IIS 7
-
On your AD FS server, open Internet Information Services (IIS) Manager.
In the Windows Start menu, click Administrative Tools > Internet Information Services (IIS) Manager.
-
In Internet Information Services (IIS) Manager, under Connections, select your server’s Hostname.
-
In the center menu, in the IIS section, double-click the Server Certificates icon.
-
In the Actions menu, click Create Certificate Request to open the Request Certificate wizard.
-
In the Request Certificate wizard, on the Distinguished Name Properties page, enter the following information and then, click Next:
Common name: Enter the name to be used to access the certificate. Make sure that the common name matches your AD FS server farm name. Microsoft recommends using the host name STS (secure token service).. For example, sts.domain.com Organization: Enter the legally registered name of your organization/company. Organizational Unit: Enter the name of your department within the organization. For example, you can enter IT or Web Security. You can also leave the text box blank. City/locality: Enter the city in which your organization/company is located. State/province: Enter the state/province in which your organization/company is located. Country/region: Type or select your two-digit country code from the drop-down list. If necessary, you can find your two-digit country code in our SSL Certificate Country Codes list. 
-
On the Cryptographic Service Provider Properties page, enter the following information and then, click Next:
Cryptographic service provider: In the drop-down list, select Microsoft RSA SChannel Cryptographic Provider, unless you have a specific cryptographic provider. Bit length: In the drop-down list, select 2048. 
-
On the File Name page, click … to browse to a location where you want to save the CSR file, enter the filename, and then, click Open.
Note: If you only enter the filename without selecting a location, your CSR file is saved to the following location: C:\Windows\System32.
-
Make sure to note the filename and the location where you saved your CSR file.
You need to open this file as a text file, copy the entire body of the text file (including the Begin New Certificate Request and End New Certificate Request tags), and paste it into the online order process when you are prompted.
-
Click Finish.
-
After you receive your SSL Certificate from DigiCert, you can install it.
See Microsoft Office 365: SSL Certificate Installation (IIS).
