Exchange 2010 CSR using Exchange Shell

Please note: The below commands can be copied and pasted into your favorite text editor such as Notepad or Notepad++ in order to customize them. We provide them only to show the structure of the New-ExchangeCertificate command (cmdlet).

Method #1: Output to the Screen

• Open Exchange Management Shell

• Run the following command: -> New-ExchangeCertificate -GenerateRequest -SubjectName “C=GB, O=Comodo, cn=owa.comodo.com” -KeySize 2048 -PrivateKeyExportable $true Note: You can copy into notepad (or any text editor) and paste the command into the shell. Alternatively, one can run the following command add the SANs(Subject Alternative Names) in the CSR as well. (optional) -> New-ExchangeCertificate -GenerateRequest -SubjectName “C=GB, O=Comodo, cn=owa.comodo.com” -DomainName owa.comodo.com, owa, autodiscover.comodo.com -PrivateKeyExportable $true

• CSR will be displayed on screen. You can copy and paste this information. Method #2: Save to File

• Open Exchange Management Shell • Run the following commands: -> $CSR = New-ExchangeCertificate -GenerateRequest -SubjectName “C=GB, O=Comodo, cn=owa.comodo.com” -PrivateKeyExportable $true -> Set-Content -Path “C:\2010certreq.txt” -Value $CSR

• At the path location specified in the previous step, your CSR will be written to that file name you have provided.

For more information about the New-ExchangeCertificate command(cmdlet), please visit Microsoft’s TechNet.