Sysadmin Lab

There are many guides out there how to request, issue and install certificates for Exchange (like this one), so I won’t go into details here. But here’s a small guide how to request, import and then export it to be able to import it to your TMG server. To create Certificate Request (CSR): New-ExchangeCertificate -GenerateRequest -Path c:\certreq.csr -KeySize 2048 -SubjectName “c=SE, s=State, l=Location, o=Org, ou=IT, cn=webmail.lab.net” -DomainName webmail.lab.net, autodiscover.lab.net -PrivateKeyExportable $True Once you have sent the CSR and you have [...]

In my lab I only use certificates issued from my own CA so I don’t have to buy a certificate. But it would be nice to be able to test real public CA:s without the need to buy a certificate (see this post for a price comparison). All of them, except Entrust, offers free trials. I decided to try them out in my lab environment where i have Exchange 2007/2010 and secured using TMG/ISA. Of an by the way, don’t [...]

If you’re getting certificates for your Exchange 2007/2010 lab, you should use use the New-ExchangeCertificate cmdlet for 2007 or 2010. In 2010 there’s a Exchange Certificate Wizard that will make your life much easier. And if that’s not enough, Digicert has created a great webtool for it. But if you, like me, really wanted to figure our what’s going on in the background, you can use the certreq.exe utility supplied since Windows 2000. It’s not as easy and to be [...]