* Clinics using Patient Portal should already have a CSR. * For offices not using Patient Portal who are not on a hosted server, a CSR must be set up on their computer before proceeding. The CSR is required to obtain a SSL certificate to facilitate HIE communication. A CSR may be obtained from a source such as Microsoft IIS 7.x..