Exchange 2010 - Generate CSR

A Certificate Signing Request (CSR) is required when applying for an SSL certificate. This CSR (and private key) can be generated on your webserver. To request a wildcard certificate, fill in an * (asterisk) for the subdomain, for example *.sslcertificaten.nl (instead of www.sslcertificates.nl).

Exchange 2010 has a GUI and a wizard to help create a CSR. The private key is generated automatically while creating the CSR, so this is not a separate process.

Note: Usually, a multi-domain certificate is used for Exchange. Since November 2015, it is no longer possible to include internal domain names in a multi-domain certificate. You should therefore replace internal domain names with regular domain names.

1. Navigate to Menu Start → Programs → Microsoft Exchange 2010 and click Exchange Management Console.
2. Click to open the Microsoft Exchange On-Premises tree and click Server Configuration in the menu to the left. 
3. Click New Exchange Certificate in the Actions-menu to the right to start the certificate wizard. 
4. You will be asked to enter a Friendly Name. Please choose an easily recognizable name, for example: mail.sslcertificaten.nl. This name is meant purely for your own convenience and is used by the server to display the certificate in the GUIs. Click Next.
5. In this window you will be able to indicate if you wish to order a wildcard certificate, for example for *.sslcertificaten.nl.
   Note: if you do indicate you want to order a wildcard certificate, the system will automatically skip step 7. Click Next. 
6. In this window, a non-wildcard certificate can be specified. Please enter the domain name you would like to protect and click Next. 
7. Here you can choose which server based services need to be protected and how they can be reached. Please choose the desired services and domain names and click Next. 
8. You will now be shown an overview of the desired domain names. It is not possible to add extra domain names on this page; this has to be done through our application page. Please indicate which domain name you wish to use as Common Name and click Next. 
9. Enter the organization data, click Browse and indicate the path to the location you want the CSR to be saved to. 
10. Click Next. You will be shown an overview with the settings that will be used (the second screen shot shows an example from a wildcard application).  
11. Click New → Finish. You have now created a CSR. 

To order a certificate, copy the entire contents of the generated CSR, including the first and last line and all dashes.

Order certficate