How to generate a Certificate Signing Request (CSR) on Internet Explorer 11

A Certificate Signing Request or CSR is a block of encoded text containing information for a certificate, including the name of the developer or organization. For Code Signing certificates, it is possible to use the Internet Explorer browser to automatically generate a CSR and corresponding private key. 

Using the Internet Explorer method, you can easily collect your Code Signing Certificate. Follow these steps to generate your Code Signing Certificate with Internet Explorer.

CSR Generation Instructions

You will need to use Internet Explorer 11 in order to securely generate your Code Signing certificate. Internet Explorer has a unique function which allows for the CSR and accompanying private key to be generated securely and easily. 

Note: The private key will be stored in the browsers certificate manager folder. You will obtain a copy of this after the certificate has been issued and downloaded in the same browser.

The following instructions will guide you through the CSR generation and enrollment process.

  1. Open Internet Explorer
  2. Login to your account on your SSL provider's website.
  3. Locate your Incomplete Code Signing
  4. Click Generate Cert Now
  5. Click Yes on Web Access Confirmation pop-up (this is crucial for the certificate generation process)
  6. Individual or Company? - If you are requesting this certificate on behalf of an organization, select Company. If you are an individual developer with no associated registered business, select Individual.
  7. Fill out all required information on the order form.
    1. If you are submitting as an Individual, please enter your full name as written on your government-issued photo ID in the Organization Name field.
    2. If you are submitting for an Organization, make sure all details you provide match the business's legal registration.
  8. Certificate Details - Here you will select the Let my browser generate a CSRoption.
    1. Contact Email (optional) - if you enter an email address here, it will be published on your certificate.
    2. Advanced Private Key Options should be configured as follows:
      1. CSP - default Microsoft Enhanced Cryptographic Provider1.0
      2. Key Size - 4096 (IMPORTANT - Code Signing key size must be a minimum of 3072 bits)
      3. Exportable? - Yes
      4. User protected? - No
  9. Read and ACCEPT the terms of the Subscriber Agreement.
  10. Click Save.
  11. The browser will create the certificate request and key. This process may take a few minutes.
  12. First Step Complete! You now have your Code Signing certificate order number.

You have now completed the generation step for your Code Signing certificate. Next, you'll be required to complete validation for the certificate based on the information you submitted. Check our Code Signing Validation knowledgebase articles for more info on the Code Signing Validation requirements.

If you have already completed validation and are ready to collect your certificate, please read our guide on How to Export Code Signing from Internet Explorer.