?
Solved

Question on Exchange CSR Commands

Posted on 2014-09-14
6
Medium Priority
?
108 Views
Last Modified: 2014-09-29
I have a requirement for providing MS level command to Issue certificate. On their view I am an Exchange expert which I know I am not. They reissue based on their customer requirement as they host multiple company's Exchange.  
Two things, It will help me in future and it will help them as well.
Below is the command I got from from internet. I want the correct syntax as per MS for issuing a new CSR for Exchange 2007, 2010 and 2013. Your suggestion highly appreciated.

Exchange2007
New-ExchangeCertificate -GenerateRequest -Path "C:\cert\mail-arzan-com-kw.csr" -KeySize 2048 -SubjectName "c=, s=Kuwait, I=Safat, o=Arzan, ou=IT, cn=mail.domain.com" -Domainname autodiscover.domain.com -PrivateKeyExportable $True -path "C:\cert\mail-domain-com.csr"

Open in new window

or this one is correct for Exchnage2007
New-ExchangeCertificate -Generaterequest -subjectname "dc=com,dc=contoso,o=Contoso Corporation,cn=mail.domain.com" -domainname  autodiscover.domain.com -PrivateKeyExportable $true -path c:\certrequest.txt

Open in new window


Exchange2010-2013
Set-Content -path "C:\CSR\mail-domain-com.csr" -value (New-ExchangeCertificate -GenerateRequest -KeySize 2048 -SubjectName "c=US, s=Teststate, I=TestCity, o=Testorg, ou=Testdept, cn=mail.domain.com" -Domainname autodiscover.domain.com -PrivateKeyExportable $True)

Open in new window

0
Comment
Question by:☠MAS☠
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
6 Comments
 
LVL 17

Expert Comment

by:Learnctx
ID: 40322571
0
 
LVL 27

Author Comment

by:☠MAS☠
ID: 40322611
Thanks for your reply.
I have gone through this, There is no key mentioned that.  It is 1024 or 2048?

And what about Exchange2010?
0
 
LVL 17

Accepted Solution

by:
Learnctx earned 2000 total points
ID: 40322796
They key size is just the size of the encryption key; either 1024 bit key or a 2048 bit key. Unless you have a reason not to use 2048 (this is also the default value if you don't specify one). Full cmdlet help for Exchange 2007 here: http://technet.microsoft.com/en-us/library/aa998327%28v=exchg.80%29.aspx.

For Exchange 2010-2013 just use the technet help article. Your example seems correct as per the help article: http://technet.microsoft.com/en-us/library/aa998327%28v=exchg.150%29.aspx. I don't have an exchange environment on hand to test. Is it throwing an error when you run the command?
0
WatchGuard's M Series Appliances - Miecom Approved

WatchGuard's newest M series appliances were put to the test by Miercom.  We had great results and outperformed all of our competitors in both stateless and stateful traffic throghput scenarios! Ready to see how your UTM appliance stacked up? Download the Miercom Report!

 
LVL 27

Author Comment

by:☠MAS☠
ID: 40322817
I tested in exchange2010 I need to test this in Ex2013
0
 
LVL 27

Author Comment

by:☠MAS☠
ID: 40327392
Did you get a chance to test in Exchage2013?
0
 
LVL 27

Author Closing Comment

by:☠MAS☠
ID: 40349639
Thanks
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A project that enables an administrator to perform actions within a user session context not just at the time of login but any time later on day(s) or week(s) later.
After hours on line I found a solution which pointed to the inherited Active Directory permissions . You have to give/allow permissions to the "Exchange trusted subsystem" for the user in the Active Directory...
In this video we show how to create an Address List in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Organization >> Ad…
To show how to generate a certificate request in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Servers >> Certificates…
Suggested Courses

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question