help with setting up a 3rd party cert

[chazzy2501]

I'm about to make a cert request but need some pointers on the last few fields. I've half filled it in but I think I need to make an ldap request to make sure I fill in the last few fields correctly.

 

New-ExchangeCertificate -GenerateRequest -DomainName bemail.beaminster.dorset.sch.uk, autodiscover.beaminster.dorset.sch.uk,  exchange.dcc-sch-4505.local, exchange -FriendlyName beaminsterschexchange -KeySize 1024 -PrivateKeyExportable:$True -SubjectName "c=US o=contoso inc, CN=server01.contoso.com" -Path c:\certrequest.txt

 

c should equal UK?

o ? I can't find organisation in Active directory?

cn should equal the servers local or public name?

 

 

external name bemail.beaminster.dorset.sch.uk

internal name exchange.dcc-sch-4505.local

 

I don't have the autodiscover service working (I think) but I don't see the harm in including it. All my 2003 and 2010 outlook clients work fine as do the owa clients. I have to set them up by hand but no biggie.

 

p.s. sorry for double post but I figured the other thread wasn't apt enough.

[Arthur]

c should equal UK?

'c' should be GB.

 

o? I can't find organisation in Active directory?

Organisation is just your school name.

 

cn should equal the servers local or public name?

We have ours set to the public name (since that is what users use to access OWA).

 

I think this is what your command should look like...

 

New-ExchangeCertificate -GenerateRequest -SubjectName "c=GB, s=Dorset, l=Beaminster, o=Beaminster School, ou=IT, cn=bemail.beaminster.dorset.sch.uk" -DomainName bemail.beaminster.dorset.sch.uk, autodiscover.beaminster.dorset.sch.uk, exchange.dcc-sch-4505.local, exchange -FriendlyName beaminsterschexchange -KeySize 2048 -PrivateKeyExportable:$True -Path c:\CertRequest.txt

 

The key size has also been set to 2048 since smaller key sizes are considered insecure.