Generate a CSR for Microsoft ISA

Microsoft ISA does not have is own certificate manager. You'll then have use IIS's.

If you have a IIS server on the ISA machine, use it. If not, use another server having IIS to request and obtain a certificate. You will then export and import it into the ISA machine. You'll find instruction in our installation procedure.

Firstly, use an available Microsoft Windows and follow the instructions below:

• either Generate a CSR with Microsoft IIS5 or IIS6
  
• either Generate a CSR with Microsoft IIS7 (Windows serveur 2008 R2, 2012 / 2013...)
  

Microsoft technical documentation

• Obtain a digital certificate and create a digital signature

N.B.: Using a certificate using a reserved IP or a local name (xxx.local, machine_name) is desapproved by the CA / Browsers Forum and will soon cease to be accepted by certification authorities (more information).

additional documentation

• Install OpenSSL on a Windows machine
• All about SHA1 and SHA256
• accented domain names (FQDN / SANs)
• Install a certificate