Professional Windows® PowerShell for Exchange Server 2007 Service Pack 1

Chapter 6: Confi guring the Client Access Server Role

173

So, putting it all together, a Subject Name may look like this:

C=US, S=Illinois, L=Chicago, O=ExchangeExchange, OU=Information Systems,

CN=webmail.exchangeexchange.com

For some certificate issuers the company listed in the Organization Name (O) must own the domain

name that appears in Common Name. If it does not match, it may fail to issue the certificate.

Running the

New-ExchangeCertificate cmdlet without any parameters generates a self - signed

certificate. The default self - signed certificates have one year before they expire.

As previously discussed, it is possible to request a certificate with multiple names. This is likely to be the

most common type of certificate for Exchange Server 2007.

There are a few parameters worth discussing in more detail before generating the certificate for our test

domain,

exchangeexchange.com .

First is the

includeaccepteddomain parameter. This includes all of the organization ’ s DNS names on

the request. For example, the test CAS is joined to the Active Directory domain

ExchangeExchange

.local

. Figure 6 - 5 shows the effects of setting this parameter to true on the left and false on the right.

The request will have both

exchangeexchange.com and ExchangeExchange.local .

Figure 6-5

Next is the

includeautodiscover parameter. This will append autodiscover to ...