Create CSR and Install Exchange Server 2013 & 2016 SSL Certificate

hi everyone myself I am Praveen and I write my blogs on exchange dictionary.com today in this video I will be discussing about how can we create exchange certificate and how can we complete a printing exchange certificate so before I start I just explained you have two servers one DC and when I exchange and I have shut down the third server we because that we are not going to use it on this let's login to the exchange admin center use a madman account which has privilege to deal with exchange certificate ensure that you using the right account before we proceed so as we can see in the exchange admin Center we have mailboxes we groups and so on and navigate to the the server onto the left pane okay so I will be completing my exchange certificate using an enterprise CA so I will keep that logged in so that we don't waste time when we try to complete the exchange certificate you navigate on the tops and our certificate should include the URLs that we decided to publish each services or the virtual directories that's in the exchange for example autodiscover exchange control panel exchange web services offline address book Outlook Web Bob etc etc so I only have one server so here the three default exchange certificate that you can see which is all created during the installation so now we will create on a new exchange certificate let's give a friendly name a display name and then click Next I will be using a mail dhadkan disordered comb as my primary CN and with a lesser sans San URLs you are allowed to enter any number of science so let's go and pick up the server for which we are trying to create a certificate request when exchange certificate request in this window you will be identifying the URLs that you are going to request for the exchange main road condors are calm I will be keeping the exchange certificate fqdn this URLs will be according to your design you do your own approach to decide what URL you will be publishing it services in Internet as well as an internet exchange that you think I will be using mailed or condoisseur calm as my published URL in case if I access locally I will be using my exchange fqdn and for our auto discover I will have to have the local as well as the Internet domain so for which I have Auto discover dot exchange dot local as well as Auto discovered condo SOCOM included in the certificate so I am NOT interested to publish my pop as well as I map so I would rather remove both the names from the request Outlook anywhere I will keep using the same domain name so I think we have finished entered click Next to move further so now we can see what all certificate or doors are subject alternative names that you need in your certificate that you are going to request so the one that you feel that it does not require you can go ahead and remove it so I will be removing both top-level domains kentucky.com and the IDI exchanged or local the domain wide URLs that's time for you to input the organization names mention the details correctly over here this will be part of your certificate information you time for you to save the certificate to a directory to keep informed you love to create a share either on local or somewhere else because you cannot browse the directory to save this certificate so ensure that you have a directory created to save the certificate request click on finish as you click finish the CSR the certificate signing request that we created now will have a status of pending request so that means a new certificate signing request has been created for submission and we will have to now request for a certificate from a certificate authority I will use my enterprise CA to complete my CSR request open the created req file this is the encrypted format of the certificate which will be submitted to the C you this copy and paste it and remove any additional space if it is there and select the web server you might not be using all these because you will be submitting your certificate signing request to an enterprise pattern to a third party certificate authority like digi cert interest GoDaddy many in fact are there so now I have requested for the certificate it will be available for download now so let us download the certificate and then we can complete the pending request on exchange server so let us save it to the same directory it will have an extension of C now go back to the exchange admin Center and click on the certificate signing request for which we have requested the certificate and click on complete and pick up the UNC name this is the complete UNC path for the certificate enter it there and click OK there is an error let's say what is that I think there's a space at the start of it yes okay so the certificate has been imported or the pending request has been completed successfully and you can see the certificate wall valid until 2015 so now the certificate is ready but you can see that there is no services assigned to it so the final step is for you to assign the services to the new exchange certificates before we proceed let's login to the exchange server and see the status of the exchange certificate from the Pao sure there are three before we create the exchange certificate and now we can see there are four and the top the first one is the newly created certificate and there is no services associated with it you can either assign the city the services from the partial or from the visa so I choose to do it from the wizard you can see the details of the certificate on the general tab and we will be navigating to the services tab on the left for assigning the required services so I will use it for IES you so the newly-created certificate has been now successfully assigned to the service IAS let us verify it once again so you can see the letter W which means the certificate is now successfully assigned and enabled for the ia service that is all from I said on this video thank you for watching have a great day you

Channel: Praveen Balan

Views: 37,728

Keywords: Create CSR, Exchange Server 2013, Microsoft, Exchange Certificate, 3rd Party Certificate, SSL Certificate Exchange Server, ExchangeDictionary.COM, Assign Services, Exchange Server 2016

Id: sucbUyLewdA

Length: 13min 21sec (801 seconds)

Published: Tue Oct 29 2013