Solved

Question on Exchange CSR Commands

Posted on 2014-09-14
6
103 Views
Last Modified: 2014-09-29
I have a requirement for providing MS level command to Issue certificate. On their view I am an Exchange expert which I know I am not. They reissue based on their customer requirement as they host multiple company's Exchange.  
Two things, It will help me in future and it will help them as well.
Below is the command I got from from internet. I want the correct syntax as per MS for issuing a new CSR for Exchange 2007, 2010 and 2013. Your suggestion highly appreciated.

Exchange2007
New-ExchangeCertificate -GenerateRequest -Path "C:\cert\mail-arzan-com-kw.csr" -KeySize 2048 -SubjectName "c=, s=Kuwait, I=Safat, o=Arzan, ou=IT, cn=mail.domain.com" -Domainname autodiscover.domain.com -PrivateKeyExportable $True -path "C:\cert\mail-domain-com.csr"

Open in new window

or this one is correct for Exchnage2007
New-ExchangeCertificate -Generaterequest -subjectname "dc=com,dc=contoso,o=Contoso Corporation,cn=mail.domain.com" -domainname  autodiscover.domain.com -PrivateKeyExportable $true -path c:\certrequest.txt

Open in new window


Exchange2010-2013
Set-Content -path "C:\CSR\mail-domain-com.csr" -value (New-ExchangeCertificate -GenerateRequest -KeySize 2048 -SubjectName "c=US, s=Teststate, I=TestCity, o=Testorg, ou=Testdept, cn=mail.domain.com" -Domainname autodiscover.domain.com -PrivateKeyExportable $True)

Open in new window

0
Comment
Question by:-MAS
  • 4
  • 2
6 Comments
 
LVL 17

Expert Comment

by:Learnctx
ID: 40322571
0
 
LVL 25

Author Comment

by:-MAS
ID: 40322611
Thanks for your reply.
I have gone through this, There is no key mentioned that.  It is 1024 or 2048?

And what about Exchange2010?
0
 
LVL 17

Accepted Solution

by:
Learnctx earned 500 total points
ID: 40322796
They key size is just the size of the encryption key; either 1024 bit key or a 2048 bit key. Unless you have a reason not to use 2048 (this is also the default value if you don't specify one). Full cmdlet help for Exchange 2007 here: http://technet.microsoft.com/en-us/library/aa998327%28v=exchg.80%29.aspx.

For Exchange 2010-2013 just use the technet help article. Your example seems correct as per the help article: http://technet.microsoft.com/en-us/library/aa998327%28v=exchg.150%29.aspx. I don't have an exchange environment on hand to test. Is it throwing an error when you run the command?
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 25

Author Comment

by:-MAS
ID: 40322817
I tested in exchange2010 I need to test this in Ex2013
0
 
LVL 25

Author Comment

by:-MAS
ID: 40327392
Did you get a chance to test in Exchage2013?
0
 
LVL 25

Author Closing Comment

by:-MAS
ID: 40349639
Thanks
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

How to resolve IMCEAEX NDRs in Exchange or Exchange Online related to invalid X500 addresses.
In-place Upgrading Dirsync to Azure AD Connect
Learn several ways to interact with files and get file information from the bash shell. ls lists the contents of a directory: Using the -a flag displays hidden files: Using the -l flag formats the output in a long list: The file command gives us mor…
This video discusses moving either the default database or any database to a new volume.

861 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question