Ask a Question

Generate CSR on Microsoft Exchange 2007 using Powershell


Generate CSR on Microsoft Exchange 2007 using Powershell
Generate CSR on Microsoft Exchange 2007
Generate CSR using Microsoft Exchange 2007


In order to generate the CSR on a Microsoft Exchange 2007 server without IIS, use Powershell and the following command syntax example.

Change the details in the -SubjectName field to match your own details:

New-ExchangeCertificate -GenerateRequest -Path c:\yourdomain.csr -KeySize 2048 -SubjectName "c=US, s=California, l=Mountain View, o=Thawte, ou=IT,"  -PrivateKeyExportable $True


yourdomain.csr: is the CSR file to be created.

c: Use the two-letter code without punctuation for country, for example: US or CA

s: Spell out the state completely; do not abbreviate the state or province name, for example: California

l: The Locality field is the city or town name, for example: Mountain View.

o: If your company or department has an &, @, or any other symbol using the shift key in its name, you must spell out the symbol or omit it to enroll.  Example: XY & Z Corporation would be XYZ Corporation.

ou: This field is optional; but can be used to help identify certificates registered to an organization. The Organizational Unit (OU) field is the name of the department or organization unit making the request.

cn: Enter the domain of your website (i.e.

For more information regarding the Exchange Management Shell, please refer to this Microsoft Knowledge base article: