Solved

Question on Exchange CSR Commands

Posted on 2014-09-14
6
99 Views
Last Modified: 2014-09-29
I have a requirement for providing MS level command to Issue certificate. On their view I am an Exchange expert which I know I am not. They reissue based on their customer requirement as they host multiple company's Exchange.  
Two things, It will help me in future and it will help them as well.
Below is the command I got from from internet. I want the correct syntax as per MS for issuing a new CSR for Exchange 2007, 2010 and 2013. Your suggestion highly appreciated.

Exchange2007
New-ExchangeCertificate -GenerateRequest -Path "C:\cert\mail-arzan-com-kw.csr" -KeySize 2048 -SubjectName "c=, s=Kuwait, I=Safat, o=Arzan, ou=IT, cn=mail.domain.com" -Domainname autodiscover.domain.com -PrivateKeyExportable $True -path "C:\cert\mail-domain-com.csr"

Open in new window

or this one is correct for Exchnage2007
New-ExchangeCertificate -Generaterequest -subjectname "dc=com,dc=contoso,o=Contoso Corporation,cn=mail.domain.com" -domainname  autodiscover.domain.com -PrivateKeyExportable $true -path c:\certrequest.txt

Open in new window


Exchange2010-2013
Set-Content -path "C:\CSR\mail-domain-com.csr" -value (New-ExchangeCertificate -GenerateRequest -KeySize 2048 -SubjectName "c=US, s=Teststate, I=TestCity, o=Testorg, ou=Testdept, cn=mail.domain.com" -Domainname autodiscover.domain.com -PrivateKeyExportable $True)

Open in new window

0
Comment
Question by:-MAS
  • 4
  • 2
6 Comments
 
LVL 17

Expert Comment

by:Learnctx
ID: 40322571
0
 
LVL 25

Author Comment

by:-MAS
ID: 40322611
Thanks for your reply.
I have gone through this, There is no key mentioned that.  It is 1024 or 2048?

And what about Exchange2010?
0
 
LVL 17

Accepted Solution

by:
Learnctx earned 500 total points
ID: 40322796
They key size is just the size of the encryption key; either 1024 bit key or a 2048 bit key. Unless you have a reason not to use 2048 (this is also the default value if you don't specify one). Full cmdlet help for Exchange 2007 here: http://technet.microsoft.com/en-us/library/aa998327%28v=exchg.80%29.aspx.

For Exchange 2010-2013 just use the technet help article. Your example seems correct as per the help article: http://technet.microsoft.com/en-us/library/aa998327%28v=exchg.150%29.aspx. I don't have an exchange environment on hand to test. Is it throwing an error when you run the command?
0
Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

 
LVL 25

Author Comment

by:-MAS
ID: 40322817
I tested in exchange2010 I need to test this in Ex2013
0
 
LVL 25

Author Comment

by:-MAS
ID: 40327392
Did you get a chance to test in Exchage2013?
0
 
LVL 25

Author Closing Comment

by:-MAS
ID: 40349639
Thanks
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Learn to move / copy / export exchange contacts to iPhone without using any software. Also see the issues in configuration of exchange with iPhone to migrate contacts.
Read this checklist to learn more about the 15 things you should never include in an email signature.
In this video we show how to create an Address List in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Organization >> Ad…
In this video we show how to create an Accepted Domain in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Ac…

864 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now