Link to home
Start Free TrialLog in
Avatar of SeeDk
SeeDk

asked on

Generating IIS 7 certificate with SAN and SMIME fields?

This if for Exchange Activesync.
If I create the certificate request using IIS, the CA generates a certificate with includes a "SMIME capabilities" field.
However, there is no option to generate a SAN field.

These instructions show how to add a SAN field:  https://techontip.wordpress.com/2011/06/06/how-to-create-a-san-certificate-signing-request-for-iis-web-server/

But the certificate generated has no "SMIME capabilities" field.
I think SMIME is an important part of Activesync, correct? So the certificate to use with ActiveSync must have it.

How can I generate a Certificate with both fields?
ASKER CERTIFIED SOLUTION
Avatar of Shaun Hardneck
Shaun Hardneck
Flag of South Africa image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of SeeDk
SeeDk

ASKER

This generates the Subject Alternative Names but it is still missing the SMIME field.


I have also heard there are third party tools that can let one pick the fields wanted in a CSR but am having no luck searching for them..do you know of any?
good day , here is an article from MS explains SMIME configuration with active sync, if you asking if its needed for active sync answer is no.

https://msdn.microsoft.com/en-us/library/dn643699.aspx
Avatar of SeeDk

ASKER

Thanks Shaun this was all that was needed!