Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I need to host a web service that would accept requests over https. Therefore I need an SSL certificate issues by some Serious Certificate Company. I asked our admins - they say I have to generate some request and give it to them before they can proceed.

I'm on Windows if that matters.

What are they talking about? Where do I start?

share|improve this question
up vote 7 down vote accepted

A certificate request is a piece of the certificate signing process, which contains the public key that's associated to a new private key that your local system generates, as well as the attributes that are being requested for the new certificate. The certificate authority company will take this file and return to you a signed certificate file with your public key and the attributes that they assign to the new certificate.

For an IIS server, there's a certificate request wizard built into IIS for generating a request. If you're not using IIS or you need more granular control, you'll be looking at the certreq command line tool.

share|improve this answer

Your folks are referring to a Certificate Signing Request.

In public key infrastructure (PKI) systems, a certificate signing request (also CSR or certification request) is a message sent from an applicant to a certificate authority in order to apply for a digital identity certificate.

This Microsoft KB article shows how to create one using the IIS MMC Snap-In:

share|improve this answer

Just to be sure, be aware that when you generate the request, you are also generating the private key (in fact you are generating the private key first) and thats the piece of information that will be used by your web server in combination with the certifcate you will receive. And thats the secret information that will allow you and only you (if you manage to keep it secret) to convince your users that you are the server that you claim to be.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.