| Microsoft
Internet Information Server 4.0 |
| Generate a Certificate Signing
Request — CSR |
Follow these instructions to generate a CSR for your Web site. When you have completed this process, click the
Close button above to close this window and continue to the next step.
Please note that for Microsoft Windows NT4.0,
you must have at least Service Pack 4.0 or higher and Microsoft
Internet Explorer 5.0 or higher installed.
- Open the Key Manager. Go to the Key menu and select Create New
Key.
- Put the request in a file that you will send to an authority. Enter a file and path in the text box that you will
remember and Click Next.
Example: C:\NewKeyRq.txt
- Enter your key name as specified in the previous step. Enter and confirm a password.
Warning: If you lose the password, you must purchase another certificate.
- When creating a CSR you must follow these conventions. Enter the
information to be displayed in the certificate. The following
characters cannot be accepted: < > ~ ! @ # $ % ^ * / \ ( ) ? . , &
Distinguished
Name Field |
Explanation |
Example |
| Common Name |
The fully qualified domain name for your web server. This must be an exact
match. |
If you intend
to secure the URL https://www.supralink.com/,
then your CSR's server hostname must be www.supralink.com |
| Organization |
The exact
legal name of your organization. Do not abbreviate. |
SupraLink |
| Organizational
Unit |
Section of the organization. |
Marketing |
| State or
Province Name |
The state or
province where your organization is located. Cannot be
abbreviated. |
Quebec |
| City or
Locality |
The city
where your organization is located. |
Montréal |
| Country |
The two-letter ISO abbreviation for your
country. |
CA |
| Administrator Name |
Contact name. |
John Ho |
| Email Address |
Contact
email. |
email@domain.com |
| Phone Number |
Contact
phone. |
514.906.1536 |
- After you close out of the key manager, click on Yes to Commit all Changes.
Warning: If you do not click yes, your private key will not be saved and your certificate from
SupraLink will not install.
- Submit your CSR to SupraLink - you will be asked to complete the
agreement and the enrollment form as well. Please remember to back up your key pair file.
The Server Gated Cryptographic extension can be enabled or disabled from the
registry
Check the registry key: HKEY_LOCAL_MACHINE\system\CurrentControlSet\Control\SecurityProviders\ SCHANNEL
By default, there is no value or key for EnableSGC. You have to add it in order to support SGC, and you would set the value to 1 - that is, you would create a new key
EnableSGC and set its value to 1. If the EnableSGC key already exists, just set EnableSGC=0.
See also the following Microsoft articles:
Innovating Information Security
SupraLink, in partnership with GeoTrust, the leading provider of next
generation information security services, delivers secure e-commerce
transactions, identity verification and authentication solutions to
the global web community. SupraLink ensures a new level of
e-business security — your first step toward leveraging the full
business potential of the Internet.
|