Microsoft Exchange 2007 - Generate an SSL certificate request (CSR)

Last updated: 14/01/2016

Generate a CSR for Microsoft Exchange 2007

This article shows you how to generate an SSL certificate request, also called a CSR, using the Exchange Management Shell (EMS) introduced in Microsoft Exchange 2007. If you received your certificate from the CA already, proceed to the « Exchange 2007 SSL Certificate Installation Instructions ».

Other versions of Microsoft Exchange

The documentation for generating an SSL certificate request for other versions of Microsoft Exchange can be found in the following articles:

• « How to generate a certificate request on Microsoft Exchange 2003 »
• « How to generate a certificate request on Microsoft Exchange 2010 »
• « How to generate a certificate request on Microsoft Exchange 2013 »

How do I create an SSL certificate request on Microsoft Exchange 2007?

1. Go to Start, Programs, Administrative Tools, Microsoft Exchange 2007, Exchange Management Shell.
    
2. At the Exchange Management Shell command line, type the following command to execute the New-ExchangeCertificate cmdlet:
   

   New-ExchangeCertificate -GenerateRequest -KeySize 2048 -Path c:\www_server_com.csr -SubjectName "c=BE, l=Antwerpen, s=Antwerpen, o=Kinamo NV, cn=mail.server.com" -DomainName owa.server.com, autodiscover.server.com -PrivateKeyExportable:$true
   

   Replace the information in the command above with your correct organisation details:
   • cn - The primary domain name for which you are requesting the certificate. 
   • o - The legal name under which your company was registered or incorporated.
   • l - Your organization's city.
   • s - Your organization's state or province. Do not use abbreviations!
   • c - The two-digit country code of your organization's country.
   • -DomainName - list any additional domain names (SAN's) you need in a comma-separated list. The primary domain name for your certificate is listed under the cn parameter of the -SubjectName argument.
      
3. Next, look for the CSR you just saved with Windows Explorer, double-click it to open it, and copy the entire contents, including the BEGIN CERTIFICATE REQUEST and END CERTIFICATE REQUEST lines, into Kinamo's SSL Certificate Application form.
    
4. After you receive your SSL certificate from the Certificate Authority, you can proceed with installation.