Microsoft Exchange 2010 - Generate SSL certificate request (CSR)
Last updated: 14/01/2016
Generate a CSR for Microsoft Exchange 2010
This article shows you how to generate an SSL certificate request, also called a CSR, for Microsoft Exchange 2010. If you received your certificate from the CA already, proceed to the « Exchange 2010 SSL Certificate Installation Instructions ».
Other versions of Microsoft Exchange
The documentation for generating an SSL certificate request for other versions of Microsoft Exchange can be found in the following articles:
GUI or command line?
You can generate your Certificate Signing Request either by using the graphical interface of the Microsoft Exchange Management Console, or through the command-line environment of Microsoft Exchange Management Shell, first introduced in Exchange 2007.
Create a CSR with Microsoft Exchange Management Shell
- Go to Start, Programs, Administrative Tools, Microsoft Exchange 2010, Exchange Management Shell.
- At the Exchange Management Shell command line, type the following command to execute the New-ExchangeCertificate cmdlet:
New-ExchangeCertificate -GenerateRequest -KeySize 2048 -Path c:\www_server_com.csr -SubjectName "c=BE, l=Antwerpen, s=Antwerpen, o=Kinamo NV, cn=mail.server.com" -DomainName owa.server.com, autodiscover.server.com -PrivateKeyExportable:$true
Replace the information in the command above with your correct organisation details:
- cn - The primary domain name for which you are requesting the certificate.
- o - The legal name under which your company was registered or incorporated.
- l - Your organization's city.
- s - Your organization's state or province. Do not use abbreviations!
- c - The two-digit country code of your organization's country.
- -DomainName - list any additional domain names (SAN's) you need in a comma-separated list. The primary domain name for your certificate is listed under the cn parameter of the -SubjectName argument.
- Next, look for the CSR you just saved with Windows Explorer, double-click it to open it, and copy the entire contents, including the BEGIN CERTIFICATE REQUEST and END CERTIFICATE REQUEST lines, into Kinamo's SSL Certificate Application form.
- After you receive your SSL certificate from the Certificate Authority, you can proceed with installation.
Create a CSR with Microsoft Exchange Management Console
- Go to Start, Programs, Administrative Tools, Microsoft Exchange 2010, Exchange Management Console.
- Click Manage Databases.
- Select Server Configuration in the left pane, and click New Exchange Certificate in the Actions menu at the right.
- Enter a Friendly Name to identify your certificate with. Use the main domain name you're requesting the certificate for.
- If you wish to request a wildcard certificate, check the box under Domain Scope, else proceed to the next step. Step 5 will be skipped if you selected a wildcard certificate.
- In the Exchange Configuration Menu, select the services you wish to secure.
- The Certificate Domains window will show a list of names Exchange 2010 suggests you include in your request. Review them, and add any extra Server Alternative Names (SAN's) you wish to secure.
- Enter your organisation's details:
- Organization - The legal name under which your company was registered or incorporated.
- Organization unit - Your department. Alternatively, leave this blank.
- Country/region - The two-digit country code of your organization's country.
- State/province - Your organization's state or province. Do not use abbreviations!
- City/locality - Your organization's city.
- Click Browse to select a location to save your CSR to.
- Next, look for the CSR you just saved with Windows Explorer, double-click it to open it, and copy the entire contents, including the BEGIN CERTIFICATE REQUEST and END CERTIFICATE REQUEST lines, into Kinamo's SSL Certificate Application form.
- After you receive your SSL certificate from the Certificate Authority, you can proceed with installation.
Order
