Wildcard SAN Cert

[MS2011]

Good morning,

 

I’m looking to renew our exchange 2016 wildcard SAN Cert.

 

Do I I need to creat a CSR using following?

 

Login to exchange admin portal

Server

Certificate

Create a new csr, I.e *.xyz.com

Send csr to third party Cert provider and they will issue a Cert.

 

Thanks

[3s-gtech]

Pretty much. You specify where the CSR will go when it's saved, usually C: on the exchange sever is easiest.

[MS2011]

Pretty much. You specify where the CSR will go when it's saved, usually C: on the exchange sever is easiest.

 

This Cert can be use on different severs ? Rds etc

[3s-gtech]

If the wildcard covers the domains on those servers, yes. I've used a mail cert for my Exchange server which is not a wildcard cert - it just contains the specific domain names. If yours currently works, then it'll be fine.

[MS2011]

If the wildcard covers the domains on those servers, yes. I've used a mail cert for my Exchange server which is not a wildcard cert - it just contains the specific domain names. If yours currently works, then it'll be fine.

 

Thanks

 

I have a generated a csr but doesn’t give me option for key size 2048?

[3s-gtech]

That should be 2048 by default. You need to create the CSR in the Exchange Management Shell if you want to specify it.