The CSR file contains information that will be used to create your certificate.
A certificate signing request (CSR) is one of the first steps towards getting your SSL certificate. We recommend to generate it on the same server you plan to install the certificate on, since the process will create the Private Key as well, which is needed during the SSL Certificate installation process.
Prerequisites
-
Access to your Exchange Server
Task completion: 20 minutes
Expertise: advanced
How to do it?
Microsoft Exchange 2013
The 2013 version now requires the creation of the CSR through your browser.
1. Launch the Exchange Admin Center by opening your favourite web browser and type in the URL bar: https://localhost/ecp
2. Establish a connection by using Domain\user name as the format for the username, and enter your password.
3. Click the Servers link in the left-hand column, then click on Certificates at the top right. Select the + symbol.
4. The New exchange certificate wizard will appear in a new window.
5. Select Create a request for a certificate from a certification authority
6. In the friendly name field, enter a name that identifies the certificate for easy lookups later on. This name is not part of the certificate itself, therefore it can be anything.
7. If you are obtaining a Wildcard certificate, check the box you will find there. If not, simply go forward with the next step.
8. Hit the Browse link to choose which server/directory you want to store the certificate request on.
9. If you are creating a wildcard certificate, you will skip this step. From the list, select the services you plan on running that will be secured by the SSL certificate. Highlight every service by pressing down CTRL when you click on a new service.
On the next screen, you will review a list of names that Exchange 2013 suggests you include in your certificate request. Review the suggested names and add a new name (if necessary) by using the + button.
10. Fill in the fields:
- Organization name should be the full legal name of your company.
- Department name is the department within the organization responsible for the certificate.
- State/Province requires accurate data. If you do not have one, enter the city information again.
11. Enter a network path where to save the CSR on your computer as a .req file, then hit Finish.
12.You will now be able to view the CSR with a text editor (Notepad, TextEdit, etc.). You will want to copy the entirety of the content of that file into the online order process where your CSR is requested.
Microsoft Exchange 2010
1. Go to Start > Programs > Microsoft Exchange 2010 > Exchange Management Console.
2. Click on the link Manage Databases.
3. Select Server Configuration in the left-hand menu, then click on New Exchange Certificate from the actions menu on the right.
4. In the friendly name field, enter a name that identifies the certificate for easy lookups later on. This name is not part of the certificate itself, therefore it can be anything.
5. Under Domain Scope, check the box if you are generating a CSR for a wildcard certificate. If not, go to the next screen. (If you select this chekbox for wildcard, skip to step 7.)
6. In the Exchange Configuration menu, select the services that you wish to run securely, and enter the names through which you connect to these services, as requested. For help with this section, we recommend you contact your Microsoft Exchange expert or review the Microsoft support page.
The next screen, will allow you to review the list of names that Exchange 2010 suggests that you include in your certificate request. Review those names.
7. Fill in the fields:
- Organization should be the full legal name of your company.
- Organization unit is the department within the organization responsible for the certificate.
- State/Province requires accurate data. If you do not have one, enter the city information again.
8. Click on Browse to Enter a network path where to save the CSR on your computer as a .req file, then hit Finish.
9. You will now be able to view the CSR with a text editor (Notepad, TextEdit, etc.). You will want to copy the entirety of the content of that file into the online order process where your CSR is requested.
0 Comments