Exchange 2013 and higher - Generate CSR
A Certificate Signing Request (CSR) is required when applying for an SSL certificate. This CSR (and private key) can be generated on your webserver. To request a wildcard certificate, fill in an * (asterisk) for the subdomain, for example *.sslcertificaten.nl (instead of www.sslcertificates.nl).
This manual is for Exchange 2013 and higher. It describes This manual describes how to create a CSR using the Exchange Certificate Wizard.
- To access the Exchange Admin Center, please open a web browser and type: https://localhost/ecp in the address bar.
- Login with Domain\user name and enter your password.
- Click on the Servers link in the column to the left, then click on Certificates in the upper right corner and finally on the + symbol.
- The new exchange certificate wizard will now appear in a pop-up window.
Select Create a request for a certificate from a certification authority and click on Next.
- In the friendly name field, enter a name that is easy to remember. Click on Next.
Note: This name is not part of the certificate request (CSR).
- If you would like to request a wild-card certificate, then check the box and enter the primary domain, for example: sslcertificaten.nl. If you do not want to request a wild-card certificate, click on Next.
- Click on Browse and select the location where you wish to save the CSR. Click on Next.
- If you are requesting a wild-card certificate, the next step will be skipped. If this is not the case, please select the services you wish to protect. Click on Next.
- In the following screen, you will see a list of domain names which Exchange 2013 proposes to include in the certificate. Click on Next.
Note: Check the list of names and, if necessary, add names using the + button.
- The organization name has to be identical to the company name registered in the Chamber of Commerce. In the Department name field for example, you could fill in: ICT department or System Administration (overview CSR fields). Note: There is a bug in Exchange 2013 which causes the fields O=(Organization) and OU=(Department) to be switched during the creation of CSR. To correct this, please enter the department name in the O field, and the organization name in the OU field. Click on Next.
- Enter a shared network path to save the CSR on your computer as a .req file. Then click on Finish.
To order a certificate, copy the entire contents of the generated CSR, including the first and last line and all dashes.