reg88.com

fine...I'll blog too

Updating Exchange 2007 Certificate (DigiCert)

Creating CSR (Request)

Visit DigiCert’s Exchange 2007 CSR Tool @ https://www.digicert.com/easy-csr/exchange2007.htm Fill the form and generate the “command” to create the CSR on Exchange 2007. The command should look like this

1
New-ExchangeCertificate -GenerateRequest -Path c:mailserver\_subdomain\_example_com.csr -KeySize 2048 -SubjectName “c=US, s=California, l=Campbell, o=Company LLC, ou=IT, cn=mailserver.subdomain.example.com” -DomainName mailserver.subdomain.example.com, autodiscover.example.com, autodiscover.example.com, webmail.example.com, mail.example.com, mailserver -PrivateKeyExportable $True

Copy the generated command into “Exchange Management Shell”. The file “c:mailserver_subdomain_example_com.csr” is created and needs to be sent to DigiCert

Importing CER (Certificate)

Once you have the signed certificate…

  1. Copy the acquired certificate to drive accessible to Exchange. i.e. C:mailserver_subdomain_example_com.cer

  2. Run the following import command and enable required services (IIS and SMTP)

1
Import-ExchangeCertificate -Path C:mailserver\_subdomain\_example_com.cer | Enable-ExchangeCertificate -Services “SMTP, IIS”
  1. Confirm the services
1
2
3
4
5
6
Get-ExchangeCertificate -DomainName mailserver.subdomain.example.com
Thumbprint Services Subject
———- ——– ——-
….
1113D77630A34FDEA3D465779897431694204423 IP.WS CN=mailserver.subdomain.example.com, OU=IT, O=Company LLC, L=Camp…
….

Enable services if missing

1
4. Enable-ExchangeCertificate -Services SMTP, IIS -thumbprint 1113D77630A34FDEA3D465779897431694204423