[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 612
  • Last Modified:

How to modify Exchange Server 2007 certificate

Here is my question: We currently have a ssl certificate on our exchange server that is mail.xxx.com. When any user opens up there Outlook client locally, they are prompted with a security certificate error. When looking at their Outlook settings, the Exchange Host Name is the server name which is xx-xx-xx. Since noticing this was the issue, I have purchased another ssl certificate. My question is how should I implement this? I have attempted to generate a new certificate, however, it wants me to either remove, replace, or renew current certificate. If I remove it, will it cause problems with Web Access since it is mail.xxx.com. Let me know if this makes sense and if I am on the right path. Please let me know if you have a solution. Thanks.
1 Solution
What exactly did you purchase?
Exchange 2007 is designed to be used with a commercial SAN/UC certificate, which contains a number of names, not a regular single name SSL certificate.
If you have a certificate issued to an IP address or similar then that isn't valid.

Your best option is to change all of the certificates you may have for a SAN/UC certificate which covers all name variations. I have instructions on my blog here:

-Check out KB 940726 it should help you to fix the issue.
bsapotAuthor Commented:
This solved my problem. Thanks!

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now