Forum Discussion

elangamban's avatar
elangamban
Copper Contributor
Jul 21, 2017

Where to create CSR for Hybrid migration?

Hi,

 

For one of our client, we're doing Hybrid migration. Current Exchange server is 2013. They've planned to deploy Exchange 2016 as Hybrid server. Now where should the csr should be generated, in the Primary exchange server or in the hybrid server.

 

Thanks.

  • Hi Elangamban,

     

    You can create CSR in any server, the best practice is to use the same certificate on all Exchange Servers.

    • elangamban's avatar
      elangamban
      Copper Contributor

      Hi Nuno,

       

      Thanks for your quick reply. I've generated the csr from 2013 server, while uploading to the third party CA, its showing the main domain as mail.<mydomain>.local and under the Add on domains, its showing autodiscover.<domain>.local

      autodiscover.<domain>.com

       

      Is it fine?

      • Hi Elangamban,

         

        Maybe your CSR is not correct, that's why your tird party shows that your local domain.

         

        Please create a new CSR using Powershell with 

        -PrivateKeyExportable $true

        to have the private key on that Exchange and then export to the others.

Resources