How to modify Exchange Server 2007 certificate

Posted on 2009-12-22
Last Modified: 2012-05-08
Here is my question: We currently have a ssl certificate on our exchange server that is When any user opens up there Outlook client locally, they are prompted with a security certificate error. When looking at their Outlook settings, the Exchange Host Name is the server name which is xx-xx-xx. Since noticing this was the issue, I have purchased another ssl certificate. My question is how should I implement this? I have attempted to generate a new certificate, however, it wants me to either remove, replace, or renew current certificate. If I remove it, will it cause problems with Web Access since it is Let me know if this makes sense and if I am on the right path. Please let me know if you have a solution. Thanks.
Question by:bsapot
    LVL 65

    Expert Comment

    What exactly did you purchase?
    Exchange 2007 is designed to be used with a commercial SAN/UC certificate, which contains a number of names, not a regular single name SSL certificate.
    If you have a certificate issued to an IP address or similar then that isn't valid.

    Your best option is to change all of the certificates you may have for a SAN/UC certificate which covers all name variations. I have instructions on my blog here:

    LVL 1

    Accepted Solution

    -Check out KB 940726 it should help you to fix the issue.

    Author Closing Comment

    This solved my problem. Thanks!

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Integrate social media with email signatures

    Is your company active on social media? Do you also use email signatures? Including social media icons in your email signature is a great way to get fans for free. Let all your email users know you’re on social media quickly and easily, in a single click.

    Hello, As I have seen there a lot of requests regarding monitoring and reporting for exchange 2007 / 2010 / 2013 I have decided to post some thoughts together and link to articles that have helped me. Of course a lot of information you can get…
    If, like me, you have a lot of Dell servers in the estate you manage this article should save you a little time. When attempting to login to iDrac on any server I would be presented with two errors. The first reads "Do you want to run this applicati…
    This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor ( If you're looking for how to monitor bandwidth using netflow or packet s…
    In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor ( If you're interested in additional methods for monitoring bandwidt…

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    12 Experts available now in Live!

    Get 1:1 Help Now