Tags for this FAQ item:
CSR Exchange 2007 Microsoft

To what extent has this article answered your question?

Rated 4 stars, based on 2 votes

Microsoft Exchange 2007 - Generate an SSL certificate request (CSR)

Last updated: 14/01/2016

This article shows you how to generate an SSL certificate request, also called a CSR, using the Exchange Management Shell (EMS) introduced in Microsoft Exchange 2007. If you received your certificate from the CA already, proceed to the « Exchange 2007 SSL Certificate Installation Instructions ».

The documentation for generating an SSL certificate request for other versions of Microsoft Exchange can be found in the following articles:

  1. Go to Start, Programs, Administrative Tools, Microsoft Exchange 2007, Exchange Management Shell.
  2. At the Exchange Management Shell command line, type the following command to execute the New-ExchangeCertificate cmdlet:
    New-ExchangeCertificate -GenerateRequest -KeySize 2048 -Path c:\www_server_com.csr -SubjectName "c=BE, l=Antwerpen, s=Antwerpen, o=Kinamo NV, cn=mail.server.com" -DomainName owa.server.com, autodiscover.server.com -PrivateKeyExportable:$true
    Replace the information in the command above with your correct organisation details:
    • cn - The primary domain name for which you are requesting the certificate. 
    • o - The legal name under which your company was registered or incorporated.
    • l - Your organization's city.
    • s - Your organization's state or province. Do not use abbreviations!
    • c - The two-digit country code of your organization's country.
    • -DomainName - list any additional domain names (SAN's) you need in a comma-separated list. The primary domain name for your certificate is listed under the cn parameter of the -SubjectName argument.
  3. Next, look for the CSR you just saved with Windows Explorer, double-click it to open it, and copy the entire contents, including the BEGIN CERTIFICATE REQUEST and END CERTIFICATE REQUEST lines, into Kinamo's SSL Certificate Application form.
  4. After you receive your SSL certificate from the Certificate Authority, you can proceed with installation.