Hi,

I was installing Exchange 2007 today for a customer Proof of Concept (POC) and the customer wanted to replace the self-signed certificate used by OWA with a certificate issed by the Certificate Authority in the lab network.  This would prevent any certificate errors for any of the customer participants in the POC.  I requested the new certificate (see http://technet.microsoft.com/en-us/library/bb310781.aspx).  But when I tried to submit the request to the W2003 Cert Authority using the MMC, I kept getting the error: 

Certificate Request Processor 

The request contains no certificate template information. 0x80094801 (-2146875391)
Denied by Policy Module 0x80094801, The request does not contain a certificate template extension or the Certificate Template request attribute.

I found this article (http://www.msexchange.org/articles_tutorials/exchange-server-2007/mobility-client-access/securing-exchange-2007-client-access-server-3rd-party-san-certificate.html) that recommended use the certreq command line utility instead of using the MMC to request the certificate.  This worked!