Please consider donating:


Exchange 2010 Certificates

In an older blog post on Certificate Authorities, I have provided some information about the process to generate Exchange 2007 certificates.  This process has slightly changed in Exchange 2010, and Johan Delimon ( has written an excellent article about this : Generating Exchange 2010 Certificates (Exchange Management Shell)

The 2 most important changes are :

  • the new-exchangecertificate cmd-let no longer supports the -path variable (so requests cannot be written directly to disk)
  • the 2007 GUI at Digicert still uses the -path parameter, so a new GUI was created to support 2010 certificate requests

In short, the updated procedure is :

  • generate the powershell command using an updated gui at Digicert :
  • Save the exchange certificate request into a $Data variable
  • Write the contents of the $Data variable to a file  (Set-Content -path “c:\request.req” -Value $Data)

Then, sign and import the certificate (bb124424(EXCHG.140).aspx)


© 2009 – 2021, Peter Van Eeckhoutte (corelanc0d3r). All rights reserved.

Comments are closed.

Corelan Training

We have been teaching our win32 exploit dev classes at various security cons and private companies & organizations since 2011

Check out our schedules page here and sign up for one of our classes now!


Want to support the Corelan Team community ? Click here to go to our donations page.

Want to donate BTC to Corelan Team?

Your donation will help funding server hosting.

Corelan Team Merchandise

You can support Corelan Team by donating or purchasing items from the official Corelan Team merchandising store.

Protected by Copyscape Web Plagiarism Tool

Corelan on Slack

You can chat with us and our friends on our Slack workspace:

  • Go to our facebook page
  • Browse through the posts and find the invite to Slack
  • Use the invite to access our Slack workspace
  • Categories