The CSR code is necessary for SSL Certificate activation. This can be generated using the Exchange Management Shell (EMS), which can be accessed at Start >> All Programs >> Microsoft Exchange Server 2007 >> Exchange Management Shell.
How to Generating a CSR in Exchange 2007 (PowerShell)
ជំហានទី 1
នេះ GenerateRequest parameter for this cmdlet is utilized for CSR code generation. The ‘SubjectName’ parameter should include all required details, which will be incorporated into the certificate. The details you need to provide will use the following abbreviations:
The details you will need to provide will use the following abbreviations:
- CN = Domain Name you need Certificate for (fully qualified domain name[FQDN]);
- C = two letter Country code;
- S = name of the State;
- L = name of the Locality/City;
- O = name of your Organization/Company
- OU = Organization Unit (Support, Sales, IT and etc.)
ជំហានទី 2
An example command to generate a certificate signing request would be:
New-ExchangeCertificate -GenerateRequest -SubjectName “C=US, S =កាលីហ្វញ៉ា, L=ទីក្រុង Los Angeles, O=1Byte Inc, OU=ការគាំទ្រ SSL, CN=www.1byte.com” -KeySize 2048 -Path c:\www.1byte.com.req -PrivateKeyExportable $true
(!)Important:
* bold text should be changed to the valid details about your own organization/company;
* In accordance with the Certificate Authorities policy change, starting from December 20, 2010, SSL Certificates can not be issued using CSR codes less than 2048-bit.
* ប៉ារ៉ាម៉ែត្រ -Path c:\www.example.com.req is used to specify the location of the future CSR code;
* ប៉ារ៉ាម៉ែត្រ -PrivateKeyExportable $true will enable export of the Certificate to another server or backup the RSA Private Key
* If you want to generate the CSR code with Subject Alternative Names (SANs) for a Multi-domain certificate, you need to add -ឈ្មោះដូមេន attribute to the command and list all the additional domains after it. For example, -DomainName mail.1byte.com, autodiscover.1byte.com
As result, CSR file named [www.example.com.req] in the root of your C: drive, it can be opened with any text editor such as Notepad. Content of that file should be pasted into correspondent box during the Certificate activation including header and footer: —–BEGIN CERTIFICATE SIGNING REQUEST—– and —– END CERTIFICATE SIGNING REQUEST—– .
Installation on Exchange 2007 can be found នៅទីនេះ.