Solved

Question on Exchange CSR Commands

Posted on 2014-09-14
6
106 Views
Last Modified: 2014-09-29
I have a requirement for providing MS level command to Issue certificate. On their view I am an Exchange expert which I know I am not. They reissue based on their customer requirement as they host multiple company's Exchange.  
Two things, It will help me in future and it will help them as well.
Below is the command I got from from internet. I want the correct syntax as per MS for issuing a new CSR for Exchange 2007, 2010 and 2013. Your suggestion highly appreciated.

Exchange2007
New-ExchangeCertificate -GenerateRequest -Path "C:\cert\mail-arzan-com-kw.csr" -KeySize 2048 -SubjectName "c=, s=Kuwait, I=Safat, o=Arzan, ou=IT, cn=mail.domain.com" -Domainname autodiscover.domain.com -PrivateKeyExportable $True -path "C:\cert\mail-domain-com.csr"

Open in new window

or this one is correct for Exchnage2007
New-ExchangeCertificate -Generaterequest -subjectname "dc=com,dc=contoso,o=Contoso Corporation,cn=mail.domain.com" -domainname  autodiscover.domain.com -PrivateKeyExportable $true -path c:\certrequest.txt

Open in new window


Exchange2010-2013
Set-Content -path "C:\CSR\mail-domain-com.csr" -value (New-ExchangeCertificate -GenerateRequest -KeySize 2048 -SubjectName "c=US, s=Teststate, I=TestCity, o=Testorg, ou=Testdept, cn=mail.domain.com" -Domainname autodiscover.domain.com -PrivateKeyExportable $True)

Open in new window

0
Comment
Question by:-MAS
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
6 Comments
 
LVL 17

Expert Comment

by:Learnctx
ID: 40322571
0
 
LVL 25

Author Comment

by:-MAS
ID: 40322611
Thanks for your reply.
I have gone through this, There is no key mentioned that.  It is 1024 or 2048?

And what about Exchange2010?
0
 
LVL 17

Accepted Solution

by:
Learnctx earned 500 total points
ID: 40322796
They key size is just the size of the encryption key; either 1024 bit key or a 2048 bit key. Unless you have a reason not to use 2048 (this is also the default value if you don't specify one). Full cmdlet help for Exchange 2007 here: http://technet.microsoft.com/en-us/library/aa998327%28v=exchg.80%29.aspx.

For Exchange 2010-2013 just use the technet help article. Your example seems correct as per the help article: http://technet.microsoft.com/en-us/library/aa998327%28v=exchg.150%29.aspx. I don't have an exchange environment on hand to test. Is it throwing an error when you run the command?
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 25

Author Comment

by:-MAS
ID: 40322817
I tested in exchange2010 I need to test this in Ex2013
0
 
LVL 25

Author Comment

by:-MAS
ID: 40327392
Did you get a chance to test in Exchage2013?
0
 
LVL 25

Author Closing Comment

by:-MAS
ID: 40349639
Thanks
0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Previously, on our Nano Server Deployment series, we've created a new nano server image and deployed it on a physical server in part 2. Now we will go through configuration.
Unified and professional email signatures help maintain a consistent company brand image to the outside world. This article shows how to create an email signature in Exchange Server 2010 using a transport rule and how to overcome native limitations …
In this video we show how to create an Address List in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Organization >> Ad…
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…

732 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question