To generate a CSR, you first need to create a key pair for your server. These two items are a digital certificate key pair and cannot be separated. If you lose your public/private key file or your password and generate a new one, your SSL Certificate will no longer match your private key. You will have to request a new SSL Certificate and may be charged.  
 
Geotrust recommends that you contact Sybase for additional information.

1. Under Administrative Tools, open Internet Services Manager.
   
2. Open the Properties window by right-clicking on the name of the Web site you wish to secure.
   
3. Click the Directory Security tab.
   
4. Click Server Certificate in the Secure communications section. If you have not used this option before the Edit button will not be active.
   
5. Select Create a new certificate
   
6. Select Prepare the request now, but send it later. Geotrust only accepts CSRs through the enrollment process forms. We do not accept CSRs over email.
   
7. Complete the information requested by the IIS Certificate Wizard to create a private key that is stored locally on your server and a public key (the Certificate Signing Request) that you will use during the enrollment process. You have successfully generated a CSR file.
   
8. Click Finish to exit the IIS Certificate Wizard. A CSR file has been generated.
   
9. Go to the enrollment form and paste the information into the form when prompted for the CSR.