Create new self-signed certificate for Exchange 2010

article #540, updated 4084 days ago

Do these in Exchange command shell, replacing all site data as indicated (US is the short geographical form):

$Data = New-ExchangeCertificate -GenerateRequest -SubjectName "c=US, o=Organization Name," -DomainName, -PrivateKeyExportable $true
Set-Content -path "C:\Docs\MyCertRequest.req" -Value $Data

Then get the thumbprint for the certificate request created above:


and paste it into this (replacing the thumbprint via copy/paste):

get-exchangecertificate -thumbprint asdfdefghijklmnopqrstuvwxyz | new-exchangecertificate

and then, most likely (again replacing the thumbprint via copy/paste):

enable-exchangecertificate -thumbprint asdfdefghijklmnopqrstuvwxyz -Services POP,IMAP,SMTP,IIS