How to Generate Exchange 2010 CSR Using PowerShell

Creating a Certificate Signing Request (CSR) for Exchange 2010 doesn't have to be complicated. With the proper commands, you can efficiently generate Exchange 2010 CSR using PowerShell, whether displaying it directly on your screen or saving it to a file. This guide will walk you through the process step-by-step, using the New-Exchange Certificate cmdlet tailored for those with SSL services, ensuring you have all the information you need to secure your Exchange server effectively.

Below are the methods for generating Exchange 2010 CSR using Exchange Shell.

Method #1: Displaying CSR on Screen

1. Open Exchange Management Shell: Start by opening your Exchange Management Shell to execute PowerShell commands.
2. Generate CSR Command:
   • Run the command to generate your CSR:
     New-ExchangeCertificate -GenerateRequest -SubjectName 'C=GB, O=Sectigo Limited, cn=owa.sectigo.com' -KeySize 2048 -PrivateKeyExportable $true
   • To include specific domain names such as owa.sectigo.com, owa, and autodiscover.sectigo.com and make the private key exportable, use:
     New-ExchangeCertificate -GenerateRequest -SubjectName 'C=GB, O=Sectigo Limited, cn=owa.sectigo.com' -DomainName owa.sectigo.com, owa, autodiscover.sectigo.com -PrivateKeyExportable $true
3. Optional Customization:
   • Optionally, you can add Subject Alternative Names (SANs) by modifying the command as needed. Copy and paste these commands into Notepad or any text editor for customization before executing.
4. View and Copy CSR:
   • The CSR will be displayed directly on the screen. You can easily copy and paste this information for further use.

Method #2: Saving CSR to a File

1. Open Exchange Management Shell: Ensure the Exchange Management Shell is open to run PowerShell commands.
2. Execute CSR Generation and Save Command:
   • Generate the CSR using the command:
     $CSR = New-ExchangeCertificate -GenerateRequest -SubjectName 'C=GB, O=Sectigo Limited, cn=owa.sectigo.com' -PrivateKeyExportable $true
   • Save the CSR to a file by specifying the path:
     Set-Content -Path 'C:\\2010certreq.txt' -Value $CSR
3. File Location Confirmation:
   • Confirm the file location where your CSR will be saved, as specified in the previous command. Your CSR will be securely written in the file 2010certreq.txt.

Review

There are two methods to generate a Certificate Signing Request (CSR) for Exchange 2010 using PowerShell. Both require you to run specific commands in your Exchange Management Shell. For your convenience, copy and paste these commands into a text editor, such as Notepad.

By following the steps in this article, you can seamlessly generate and manage your CSR for Exchange 2010 using PowerShell, ensuring your SSL configuration is correctly set up.