Generate a CSR for Microsoft Exchange 2010

In Exchange 2010, Microsoft wanted all the communications to be secured by SSL. It a quasi-complete success and the server is delivered with a self-signed certificate.

For a normal functioning the self-signed certificate has to be replaced by a certificate recognized by web browsers and mobile platforms. You'll have to do the stocktaking of FQDN/SAN you'll need to smooth the services functioning with certificates.

Look for:

• the external and/or internal FQDN for Outlook Web Access
• the external and/or internal FQDN for Exchange ActiveSync
• the external and/or internal FQDN for Autodiscover, Outlook Anywhere, Web Services
• the external and/or internal FQDN for POP, IMAP
• the external and/or internal FQDN for Unified Messaging Server
• the external and/or internal FQDN for Hub Transport Server
• the external and/or internal FQDN for Federation Sharing

Once this done you can follow the same instruction than for an Exchange 2007 Generate a CSR for Microsoft Exchange 2007 or use the new Microsoft assistant in the Exchange Management Console, at the Server Organization root, New Exchange Certificate.

Whatever the method, once the CSR generated:

• Place your request on our website using the appropriate link. See Access an order form
• Copy/paste the CSR file content in the form.

In case of a renewal

If you want to renew your SSL certificate with Exchange 2010, you'd better not use the "Renew" function of the Exchange 2010 management console (EMC). Indeed, it generates CSR in binary format that is not compatible with the standard X509 text format used by almost all suppliers. See Renew a certificate with Exchange 2010

See also:

• http://technet.microsoft.com/en-us/library/bb125165(EXCHG.140).aspx
• http://technet.microsoft.com/en-us/library/dd351057(EXCHG.140).aspx