Step 1: Open the IIS Manager

1. Go to the Start menu and type in "IIS Manager" and press Enter.
2. Alternatively, you can also open the IIS Manager by clicking on the server name in the Server Manager and then clicking on the IIS Manager option.

Step 2: Select the server you want to create the CSR for

1. In the IIS Manager, expand the tree on the left-hand side to find the server you want to create the CSR for.
2. Right-click on the server and select "Server Certificates" from the drop-down menu.

 Step 3: Generate a new CSR

1. In the Server Certificates window, click on the "Create Certificate Request" option.
   

1. Fill out the necessary information in the Distinguished Name Properties window, including the Common Name, Organization, Organizational Unit, City/Locality, State/Province, and Country.
   

Step 4: Choose a cryptographic service provider

1. Select the cryptographic service provider you want to use from the drop-down menu. The default is "Microsoft RSA SChannel Cryptographic Provider."
   

Step 6: Save the CSR

1. Click on the "Finish" button to create the CSR.
2. Save the CSR to your computer by clicking on the "Save" button and selecting a location to save the file.
   

Step 7: Submit the CSR to the certificate authority

1. Submit the CSR to the certificate authority of your choice for them to issue a certificate based on the information provided in the CSR.

Step 8: Install the certificate

1. Once you receive the certificate from the certificate authority, install it on your IIS 8 or 8.5 server by going back to the "Server Certificates" window in the IIS Manager, and clicking on the "Complete Certificate Request" option.
   
2. Select the certificate file and provide a friendly name for the certificate.
   

Step 9: Assign the certificate to a website