Exchange 2013 Certificates

Hello, I have a new install of Exchange 2013 running on a Server 2012 network. Everything is working fine. I was told that I would need a CSR Certificate. I know nothing about certificates. First how do I get it and second, how do I install it. If everything seems to be running ok what is the cert for?

Thank you
LVL 1
daskas27Asked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

R--RCommented:
If you use a self-signed then you have to install it on each and every workstation, device which is going to connect to Exchange server. The third party certificate is trusted certificate and do not have to install on the computer, mobile device. So you have to purchase third party certificate for the server.

You can refer the link from www.digicert.comon how to create and install certificate on Exchange 2013.

https://www.digicert.com/csr-creation-microsoft-exchange-2013.htm

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
daskas27Author Commented:
What is the purpose of the cert?
R--RCommented:
Please go through the technet link below to understand about the certificate.

https://technet.microsoft.com/en-us/library/dd351044(v=exchg.150).aspx
Determine the Perfect Price for Your IT Services

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden with our free interactive tool and use it to determine the right price for your IT services. Download your free eBook now!

MASEE Solution Guide - Technical Dept HeadCommented:
I strongly suggest to buy a 3rd party certificate of your budget which will make your life easy.
Here you go about certificates and its installation
http://www.msexchange.org/articles-tutorials/exchange-server-2013/management-administration/managing-certificates-exchange-server-2013-part1.html
Md. MojahidCommented:
Exchange 2013 creates a self-signed SAN certificate and assigns it to the services like IMAP, POP, IIS, and SMTP.The only drawback of this self-signed certificate is that it contains the server’s FQDN and NetBIOS names only.Where we get certificate errors on all the Clients where we need to install the Self signed Certificates manually on all the clients , which is a hassle and no one likes it in fact .

To avoid any certificate related errors and use it over the internet without any problems it is highly recommended that you request and assign a certificate from a Certification Authority that can be contacted from anywhere like DigiCert,VeriSign,Go Daddy etc.. .

Step 1:

Requesting a Certificate , you can use Exchange Management shell or GUI

GUI is much user friendly

You can refer the link below to use GUI and Export the Exchange Certificate

http://www.careexchange.in/how-to-create-an-ssl-certificate-request-for-exchange-server-2013/

Step 2:

Use this request file for submission to the CA and download the certificate. Save the certificate to a convenient location.Upload the CSR (.req) file to the third party Cert providers like DigiCert.
Step 3:

To Import the Generated certificate.
Jeff GloverSr. Systems AdministratorCommented:
Since no one has mentioned it, your term CSR certificate is not really correct. CSR stands for Certificate Signing Request. (what will be created in Step 1 of Md.Mojahids directions) You really need a SAN or UCC certificate to use Exchange externally. Self signed or Internally generated certificates are not really good for Exchange if you access it from the Internet with Either OWA or ActiveSync.
daskas27Author Commented:
Thank you
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.