Ask a Question

Advanced Search

Solution ID : SO21725

Last Modified : 05/02/2018

Certificate Signing Request (CSR) Generation Instructions for Microsoft Exchange 2013


This document provides instructions for generating a Certificate Signing Request (CSR) for Exchange 2013. If this document can not be used on the server, RapidSSL recommends contacting Microsoft.

NOTE: To generate a CSR for Microsoft Exchange 2013 using the Exchange Management Shell (command line) perform the steps located here.


To generate a CSR for Microsoft Exchange 2013 using IIS perform the following steps:

  1. Start IIS by selecting Tools >  Internet Information Services (IIS) Manager

  2. Select Server Certificates

  3. Click Create Certificate Request on the right side.

  4. Complete in full all the required fields in the new page that will appear, without any abbreviation, except the country code.

    - Common Name: The fully qualified domain name that the certificate will be issued to and secure.
    - Organization: The registered organizational name.
    - Organizational Unit: The department within the organization.
    - City/locality: The Business registered location (not the actual server location)
    - State/province: The Business registered state or province
    - Country/region: The two letter ISO country code
  5. Click Next
  6. Click 2048 or 4096 from the Bit Length: drop down list.

  7. Click Next
  8. Specify the file name and location for the certificate request file.

  9. Click Finish

  10. Copy the saved CSR when requesting a certificate including the header and footer lines
  11. Proceed with the Enrolment.

    NOTE: During the enrolment open the CSR file created from the above steps and copy the full contents into the enrollment form. 

Once the certificate has been issued, refer to this link for installation instructions.