+ Post New Thread
Results 1 to 2 of 2
Enterprise Software Thread, help with setting up a 3rd party cert in Technical; I'm about to make a cert request but need some pointers on the last few fields. I've half filled it ...
  1. #1
    chazzy2501's Avatar
    Join Date
    Jan 2008
    Location
    South West
    Posts
    1,723
    Thank Post
    206
    Thanked 254 Times in 206 Posts
    Rep Power
    65

    help with setting up a 3rd party cert

    I'm about to make a cert request but need some pointers on the last few fields. I've half filled it in but I think I need to make an ldap request to make sure I fill in the last few fields correctly.

    Code:
    New-ExchangeCertificate -GenerateRequest -DomainName bemail.beaminster.dorset.sch.uk, autodiscover.beaminster.dorset.sch.uk,  exchange.dcc-sch-4505.local, exchange -FriendlyName beaminsterschexchange -KeySize 1024 -PrivateKeyExportable:$True -SubjectName "c=US o=contoso inc, CN=server01.contoso.com" -Path c:\certrequest.txt
    c should equal UK?
    o ? I can't find organisation in Active directory?
    cn should equal the servers local or public name?


    external name bemail.beaminster.dorset.sch.uk
    internal name exchange.dcc-sch-4505.local

    I don't have the autodiscover service working (I think) but I don't see the harm in including it. All my 2003 and 2010 outlook clients work fine as do the owa clients. I have to set them up by hand but no biggie.

    p.s. sorry for double post but I figured the other thread wasn't apt enough.

  2. #2


    Join Date
    Feb 2007
    Location
    51.405546, -0.510212
    Posts
    8,116
    Thank Post
    203
    Thanked 2,385 Times in 1,765 Posts
    Rep Power
    703
    Quote Originally Posted by chazzy2501 View Post
    c should equal UK?
    'c' should be GB.

    Quote Originally Posted by chazzy2501 View Post
    o? I can't find organisation in Active directory?
    Organisation is just your school name.

    Quote Originally Posted by chazzy2501 View Post
    cn should equal the servers local or public name?
    We have ours set to the public name (since that is what users use to access OWA).

    I think this is what your command should look like...

    Code:
    New-ExchangeCertificate -GenerateRequest -SubjectName "c=GB, s=Dorset, l=Beaminster, o=Beaminster School, ou=IT, cn=bemail.beaminster.dorset.sch.uk" -DomainName bemail.beaminster.dorset.sch.uk, autodiscover.beaminster.dorset.sch.uk, exchange.dcc-sch-4505.local, exchange -FriendlyName beaminsterschexchange -KeySize 2048 -PrivateKeyExportable:$True -Path c:\CertRequest.txt
    The key size has also been set to 2048 since smaller key sizes are considered insecure.

SHARE:
+ Post New Thread

Similar Threads

  1. Help with setting up 2nd DHCP Scope SWGFL
    By SWICT in forum Wired Networks
    Replies: 7
    Last Post: 29th November 2012, 01:53 PM
  2. Bit of help with setting up Bring Your own devices
    By alfatec in forum Internet Related/Filtering/Firewall
    Replies: 5
    Last Post: 1st February 2012, 12:03 PM
  3. Replies: 4
    Last Post: 10th May 2008, 01:32 PM
  4. Replies: 13
    Last Post: 9th August 2006, 01:08 AM
  5. Help with setting up a domain on a Donated HP Netserver
    By tickmike in forum Wireless Networks
    Replies: 11
    Last Post: 13th July 2006, 10:28 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •