I have the following message arriving in my eventlog
The STARTTLS certificate will expire soon:
So with a bit of research I discover this is a self signed certificate for Lan based services and I can create a new one using the New-ExchangeCertificate cmdlet,
Some questions though.
One has to specify which services it should support.
Can I tell from the old certificate which services it is supporting.
Can I just specify all services
We actually have a CA certificate installed on our server for OWA so I guess I shouldn't include IIS in the list of services to self certify. My concern is to not cause issues with the CA certificate.
Your advice is much appreciated