CSR Generation: Microsoft Exchange 2007
Generating a Certificate Signing Request (CSR) on Microsoft Exchange 2007
CSR generation on Microsoft Exchange 2007 uses a cmdlet accessed via the Exchange Management Shell (EMS). To access the EMS, go to the 'Start' menu > Programs > Microsoft Exchange Server 2007 and choose 'Exchange Management Shell'.
- Open the EMS as above. The command you need to enter looks like this:
New-ExchangeCertificate -GenerateRequest -KeySize 2048 -SubjectName "C=US, O=Example Company, L=City, ST=State, CN=exchange.example.com" -DomainName exampletwo.com, examplethree.com -Path c:\exchange.example.com.req -PrivateKeyExportable:$true
-GenerateRequest: This is the command flag to create a new CSR.
-KeySize: This controls the size of your private key. We recommend at least 2048 bit.
-SubjectName: This sets the Subject of your CSR. 'C' is Country, in the ISO-3166 two-letter standard (note 'GB' for Great Britain, US for USA etc.). 'O' is Organisation. 'L' is Locality. 'ST' is State or province. 'CN' is CommonName, or your primary FQDN for the server.
-DomainName: This allows you to specify additional domain names, as most Exchange 2007 installations require the certificate to secure more than one FQDN.
-Path: This specifies where to place the CSR.
-PrivateKeyExportable: This sets that the private key being generated is exportable, and will allow you to backup and/or move the private key later.
- Open the CSR file (specified above with the '-Path' flag) with a text-editor and copy and paste the contents into the enrollment form when requested.
Notes:
Instead of specifying all the domains within the command, there are two additional flags that can be specified: '-IncludeAcceptedDomains' and '-IncludeAutoDiscover'. Using these instead of the '-DomainName' flag will automatically add the autodiscover FQDN, as well as all of the domains Exchange is configured to accept.
The Microsoft TechNet article for this command is available here: http://technet.microsoft.com/en-us/library/aa998327(EXCHG.80).aspx.
|
