dear all, when i try to generate a new csr i got the following error: new-exchangecertificate: this operation can only be performed locally on a microsoft exchange server that has the edge transport, hub transport, client access, or unified messaging server role installed. please log on locally to microsoft exchange server that has one of the supported server roles isntalled and perform this operation again at line:1 char:24 is that means my server don't have the edge transport, hub transport, client access, or unified messaging server service?

What happens if you run it on an Exchange server that does have one of those roles? Otherwise, are you running Forefront Security for Exchanger Server? See here then: http://social.technet.microsoft.com/Forums/en-US/Forefrontedgesetup/thread/169d91a1-e8ea-441c-86d1-e20df99a54b8

if so...how can i generate the csr??

and i notice that the exchange server really don't have edge transport, hub transport, client access, or unified messaging roles