Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 112
  • Last Modified:

Question on Exchange CSR Commands

I have a requirement for providing MS level command to Issue certificate. On their view I am an Exchange expert which I know I am not. They reissue based on their customer requirement as they host multiple company's Exchange.  
Two things, It will help me in future and it will help them as well.
Below is the command I got from from internet. I want the correct syntax as per MS for issuing a new CSR for Exchange 2007, 2010 and 2013. Your suggestion highly appreciated.

Exchange2007
New-ExchangeCertificate -GenerateRequest -Path "C:\cert\mail-arzan-com-kw.csr" -KeySize 2048 -SubjectName "c=, s=Kuwait, I=Safat, o=Arzan, ou=IT, cn=mail.domain.com" -Domainname autodiscover.domain.com -PrivateKeyExportable $True -path "C:\cert\mail-domain-com.csr"

Open in new window

or this one is correct for Exchnage2007
New-ExchangeCertificate -Generaterequest -subjectname "dc=com,dc=contoso,o=Contoso Corporation,cn=mail.domain.com" -domainname  autodiscover.domain.com -PrivateKeyExportable $true -path c:\certrequest.txt

Open in new window


Exchange2010-2013
Set-Content -path "C:\CSR\mail-domain-com.csr" -value (New-ExchangeCertificate -GenerateRequest -KeySize 2048 -SubjectName "c=US, s=Teststate, I=TestCity, o=Testorg, ou=Testdept, cn=mail.domain.com" -Domainname autodiscover.domain.com -PrivateKeyExportable $True)

Open in new window

0
MAS
Asked:
MAS
  • 4
  • 2
1 Solution
 
LearnctxEngineerCommented:
0
 
MASTechnical Department HeadAuthor Commented:
Thanks for your reply.
I have gone through this, There is no key mentioned that.  It is 1024 or 2048?

And what about Exchange2010?
0
 
LearnctxEngineerCommented:
They key size is just the size of the encryption key; either 1024 bit key or a 2048 bit key. Unless you have a reason not to use 2048 (this is also the default value if you don't specify one). Full cmdlet help for Exchange 2007 here: http://technet.microsoft.com/en-us/library/aa998327%28v=exchg.80%29.aspx.

For Exchange 2010-2013 just use the technet help article. Your example seems correct as per the help article: http://technet.microsoft.com/en-us/library/aa998327%28v=exchg.150%29.aspx. I don't have an exchange environment on hand to test. Is it throwing an error when you run the command?
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

 
MASTechnical Department HeadAuthor Commented:
I tested in exchange2010 I need to test this in Ex2013
0
 
MASTechnical Department HeadAuthor Commented:
Did you get a chance to test in Exchage2013?
0
 
MASTechnical Department HeadAuthor Commented:
Thanks
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

  • 4
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now