OCS 2007 CSR Command Wizard

The faster way to make your CSR in OCS 2007.
Fill in the details, click Generate, then copy your CSR command into a Command Prompt.

Note:    After 2015, certificates for internal names will no longer be trusted.

Certificate Details
Common Name:
Subject Alternative
State / Province:
Key Size:
Making your CSR is easy!

It looks like JavaScript is disabled in your browser. If you enable JavaScript, this panel will show helpful information as you switch from field to field.
Common Name (required)

This server's fully qualified domain name. If you are not sure what name to use, please refer to the notes below.

To secure mail.example.com, your common name or one of your subject alternative names must be mail.example.com.

Less commonly, you may also enter the public IP address of your server.
Subject Alternative Names (optional)

Other FQDNs to be covered by this certificate. One per line, or comma separated, either way is fine.
Department (optional)

Many people leave this field blank. This is the department within your organization which you want to appear in the certificate. It will be listed in the certificate's subject as Organizational Unit, or "ou."

Common examples:

  • Web Administration
  • Web Security
  • Marketing
  • Engineering
  • Information Technology

The city where your organization is legally located.
State or Province

The state or province where your organization is legally located.

We guessed your country based on your IP address, but if we guessed wrong, please choose the correct country. If your country does not appear in this list, there is a chance we cannot issue certificates to organizations in your country.
Organization name

The exact legal name of your organization. Example: "DigiCert, Inc."

Less commonly, if you do not have a legal registered organization name, you must enter your own full name here.
Key Size

Key sizes smaller than 2048 are considered insecure.
Now launch a Command Prompt (Start->Run->cmd) then CD into your OCS folder and paste this command to run LCSCMD.exe. Your CSR will be written to c:\\###FILE###.csr.
Where do you paste this command?

Run the command in a Command Prompt on your server:

  1. Login to your OCS 2007 server
  2. Click Start > Run > cmd.exe
  3. Run: CD "C:\Program Files\Common Files\Office Communications Server 2007"
  4. Paste the LCSCmd command from this page into the Command Prompt window and press Enter
  5. Your CSR file should now be in C:\ on your server (as named by the /filename option in the command itself.)
What kind of certificate should you buy?

When you want SSL for OCS 2007, your choices are Single Certificates and Multi-Domain (SAN) Certificates.

Multi-Domain (SAN) Certificates give you control of the Subject Alternative Name field so you can protect multiple different URLs with just one certificate. Microsoft recommends Multi-Domain (SAN) Certificates because they greatly simplify your SSL configuration.

2 Years $782 4 names, additionals $257 each (Save 10%) Buy Now
1 Year $412 4 names, additionals $135 each Buy Now

Single Certificates do not contain Subject Alternative Names so they are only able to protect one server name, such as mail.example.com. If you only use one server name for your OCS 2007 server, a single certificate will work perfectly.

Per Year Pricing
2 Years $207 per year ($414) (You Save 10%) Buy Now
1 Year $218 Buy Now

What should you use as the Common Name?

Use the fully qualified domain name of your server--the name clients use when connecting to the server, such as cwa.example.com.

If you'll be using mobile devices to connect to OCS 2007, you may want to read about Subject Alternative Name compatibility for more details.