• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 514
  • Last Modified:

Exchange 2007 Expired STARTTLS certificate

Event Type:      Warning
Event Source:      MSExchangeTransport
Event Category:      TransportService
Event ID:      12018
Date:            4/5/2010
Time:            2:42:54 PM
User:            N/A
Computer:      RSUSDHUB1
Description:
The STARTTLS certificate will expire soon: subject: rsusdhub1.student.rsu.edu, hours remaining: 4E823D4FF66743BE07BE2B27D8B99B2EDE4AC33A. Run the New-ExchangeCertificate cmdlet to create a new certificate.

We have separate Microsoft Exchange 2007 servers broken up into an Edge, Hub and Mailbox. The above message is only appearing on the Hub server.  
What are the procedures for renewing the Self-Signed certificate?
0
RSUWayne
Asked:
RSUWayne
5 Solutions
 
AkhaterCommented:
just go to powershell and issue a new-exchangecertificate   when prompted for overwrite press Y
0
 
RSUWayneAuthor Commented:
I am new to exchange, can you elaborate on your answer. From which server do I renew the certificate from. Can you give me detaiiled procedures?
0
 
AkhaterCommented:
on the server you are experiencing the problem on (Hub server?)  run Exchange Management Shell and simply type at the prompt

new-exchangecertificate
0
Free tool for managing users' photos in Office 365

Easily upload multiple users’ photos to Office 365. Manage them with an intuitive GUI and use handy built-in cropping and resizing options. Link photos with users based on Azure AD attributes. Free tool!

 
Rick FeeMessaging Engineer - Disaster Recovery EngineerCommented:
0
 
RSUWayneAuthor Commented:
On our Hub server there are 2 valid certificates. The self-signed that is getting ready to exprire and a 3rd party(thawte) certificate. Do we need to be able to specify the thumbprint of the certificate that we need to renew? Does the Start-EdgeSyncronization command also need to be run?
0
 
AkhaterCommented:
issuing new-exchangecertificate will just create a new self signed certificate and replace the self-signed one about to expire, it will not affect any 3rd party ceritificate you have installed and using for IIS/OWA/RPC etc...
0
 
Shreedhar EtteCommented:
Get-exchangecertificate -thumbprint 18AC0DDF9EACDC42CF98CBCDB13211A465A92F9E

then

Get-exchangecertificate -thumbprint 18AC0DDF9EACDC42CF98CBCDB13211A465A92F9E | new-exchangecertificate
0
 
RSUWayneAuthor Commented:
I am a rookie with Exchange and appreciated the help, but when I asked for details the responses were so abbreviated.
0

Featured Post

Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now