Problem: During a Unified Communication Certificate creation through the Entrust Cloud Interface, you receive an error that there is an invalid domain in your CSR and that you do not have the permission to create certificates for this domain. The interface does not allow you to create the certificate. Cause: The domain or host name that you have included in your Certificate Request is not a pre-approved domain on the managed account. Solution: Review the command that you used to create your Certificate Request. Make sure that the root domains for the common name and and Subject Alternative Names (SANs) have been added to your account through the domain management utility. For example, the following command was used to create a CSR (one line):

New-ExchangeCertificate -GenerateRequest -SubjectName "c= US , o= Entrust Inc , cn= mail.entrust.com "  -DomainName autodiscover.entrust.com,autodiscover.entrust.net, mail, localhost -privatekeyexportable $true -Path c:\certReq.txt

The following root domains/host names should be included on your account domain list:

• entrust.com
• entrust.net
• mail
• localhost

To see your pre-approve domain list: 1 - Click on Administration 2 - Click on Client Management 3 - Click the Edit button beside the client under the Action Column 4 - Click the Client Domain Information tab You will see all of your domains listed here. If you want to add one, simply enter it into one of the empty boxes at the bottom of the page and hit submit request. The domain will be sent to Entrust Datacard for approval and you will be notified when it has been added.

If you have any questions or concerns please contact the Entrust Certificate Services Support department for further assistance:

Hours of Operation:
Sunday 8:00 PM ET to Friday 8:00 PM ET
North America (toll free): 1-866-267-9297
Outside North America: 1-613-270-2680 (or see the list below)
NOTE: Smart Phone users may use the 1-800 numbers shown in the table below.
Otherwise, it is very important that international callers dial the UITF format exactly as indicated. Do not dial an extra "1" before the "800" or your call will not be accepted as an UITF toll free call.