Exchange 2013 and higher - Generate CSR

A Certificate Signing Request (CSR) is required when applying for an SSL certificate. This CSR (and private key) can be generated on your webserver. To request a wildcard certificate, fill in an * (asterisk) for the subdomain, for example *.sslcertificaten.nl (instead of www.sslcertificates.nl).

This manual is for Exchange 2013 and higher. It describes This manual describes how to create a CSR using the Exchange Certificate Wizard.

1. To access the Exchange Admin Center, please open a web browser and type: https://localhost/ecp in the address bar.
2. Login with Domain\user name and enter your password. 

   

3. Click on the Servers link in the column to the left, then click on Certificates in the upper right corner and finally on the + symbol. 

   

4. The new exchange certificate wizard will now appear in a pop-up window.
   Select Create a request for a certificate from a certification authority and click on Next. 

   

5. In the friendly name field, enter a name that is easy to remember. Click on Next.
   Note: This name is not part of the certificate request (CSR). 

   

6. If you would like to request a wild-card certificate, then check the box and enter the primary domain, for example: sslcertificaten.nl. If you do not want to request a wild-card certificate, click on Next.

    

7. Click on Browse and select the location where you wish to save the CSR. Click on Next.

    

8. If you are requesting a wild-card certificate, the next step will be skipped. If this is not the case, please select the services you wish to protect. Click on Next. 

   

9. In the following screen, you will see a list of domain names which Exchange 2013 proposes to include in the certificate. Click on Next.
   Note: Check the list of names and, if necessary, add names using the + button. 

   

10. The organization name has to be identical to the company name registered in the Chamber of Commerce. In the Department name field for example, you could fill in: ICT department or System Administration (overview CSR fields). Note: There is a bug in Exchange 2013 which causes the fields O=(Organization) and OU=(Department) to be switched during the creation of CSR. To correct this, please enter the department name in the O field, and the organization name in the OU field. Click on Next. 

    

11. Enter a shared network path to save the CSR on your computer as a .req file. Then click on Finish. 

    

To order a certificate, copy the entire contents of the generated CSR, including the first and last line and all dashes.

Order certficate