Create a Self-Signed Certificate for EXO Authentiction

this document details the steps to create a self signed certificate with the intended use to authenticate with exchange online logon to activate server run powershell as administrator copy the script below to the server, modify the cert name, password and export path as required $certname = "azure exo cert" $certpath = "cert \localmachine\my" $exportpath = "c \temp" \# create export folder if it doesn't exist if (!(test path path $exportpath)) { new item path $exportpath itemtype directory | out null } \# create the self signed certificate $cert = new selfsignedcertificate ` subject "cn=$certname" ` keyalgorithm rsa ` keylength 2048 ` keyexportpolicy exportable ` keyspec signature ` certstorelocation $certpath ` notafter (get date) addyears(2) ` hashalgorithm sha256 ` friendlyname $certname \# export the public certificate ( cer) for azure ad export certificate ` cert $cert ` filepath "$exportpath\\$certname cer" ` force \# define and secure the password for the private key $plainpassword = "\<enter password>" $securepassword = convertto securestring string $plainpassword force asplaintext \# export the private certificate ( pfx) with the secure password export pfxcertificate ` cert $cert ` filepath "$exportpath\\$certname pfx" ` password $securepassword ` force run powershell as administrator and run the above script browse to the export folder double click the certificate pfx file to install it set store location to local machine, click next click yes to uac to run as administrator in windows click next enter the password that was used to generate the certificate click next place all certificates in the following store personal, click next finish