Request Certificate Wizard - Cryptographic Service Provider Properties

Applies To: Windows Server 2008

Use the Cryptographic Service Provider Wizard page to select either Microsoft RSA SChannel Cryptographic Provider or Microsoft DH SChannel Cryptographic Provider to provide certificates that can encrypt transmissions between your server and clients. Additionally, you can adjust the level of security for your transmission by changing the bit length associated with the cryptographic service provider.

UI Element List

Element Name	Description
Cryptographic service provider	Select either Microsoft RSA SChannel Cryptographic Provider or Microsoft DH SChannel Cryptographic Provider. The default cryptographic service provider is Microsoft RSA SChannel Cryptographic Provider. Note Select Microsoft DH SChannel Cryptographic Provider when you must exchange a secret key over a network that is not secure and you have had no prior communication with the other party.
Bit length	Select a bit length that the provider you selected will use. By default, the RSA SChannel provider uses a bit length of 1024, and the DH SChannel provider uses a bit length of 512. Note A longer bit length increases the level of encryption. However, it can decrease performance because it requires the transmission of additional bits.

See Also

Other Resources

Configuring Server Certificates in IIS 7.0 (online)