SSL Cert request syntax with Powershell (Full Version)

All Forums >> [Microsoft Exchange 2007] >> Secure Messaging



Message


cchapman -> SSL Cert request syntax with Powershell (17.Sep.2007 1:59:16 PM)

Been having trouble generating a SSL cert request from my EX2007 server using powershell. Keep getting error "Parameter set cannot be resolved using the specified named parameters." Here is what the syntax looks like (host and domain names have been changed for security purposes) :
 
New-ExchangeCertificate -domainname smokey,smokey.sybercrack.com,webmail,webmail.sybercrack.com,autodiscover.sybercrack.com -FriendlyName "Sybercrack Exchange Server" -GenerateRequest -Subjectname "dc=com,dc=sybercrack,o=Sybercrack International,cn=webmail.sybercrack.com" -PrivateKeyExportable $true -Services "IMAP, POP, UM, IIS, SMTP" -path c:\certrequest1.txt
 
Been monkeying with this for two days and am getting no love. Can't find anything on Technet to address this problem. Maybe you can check the syntax and see if I have something wrong here. Thanks in advance for your help.




cchapman -> RE: SSL Cert request syntax with Powershell (17.Sep.2007 2:12:48 PM)

In working on this, I was able to get a CSR created by eliminating the -services parameter. Does anyone know if the resulting certificate will be able to be utilized by all Client Access Role services (IIS, IMAP, POP, UM, SMTP)???




CameronFrasnelly -> RE: SSL Cert request syntax with Powershell (19.Sep.2007 12:28:51 AM)

I'm getting ready to fight the ssl nightmare in EX2007 and was wondering if you had figured out how to generate the csr and properly apply the cert?  It looks like you are running a single server as well so I think your situation would be similar to mine!

Any help would be greatly appreciated!!!




ankbomb -> RE: SSL Cert request syntax with Powershell (22.Oct.2007 1:48:48 AM)

It's a little late to help, but in case anyone else runs into this thread.
 
The -services option is set on enable-exchangecertificate (after you import the cert to match your generated public key)
 
the cert can be used by all roles.  however, depdning on your environment, you may need more or less names in the SAN.




Page: [1]