Solved

Expired Exchange 2007 Certificate on Edge Transport

Posted on 2010-09-16
7
1,380 Views
Last Modified: 2012-05-10
Hi there,

I got my Exchange 2007 Certificate expired. The certificate is on Edge Trasport. So I found this article:

http://exchangepedia.com/2008/01/exchange-server-2007-renewing-the-self-signed-certificate.html

But it doesn't explain how to do it in Edge, only in Hub/CAS. I would like to know if it's the same. I readed that I have to re-subscribe the Edge. Do you know how to do it please?

And one more question... I got 2 Edge Servers, do I have to do it on both servers?

Thanks a lot.
0
Comment
Question by:ney_santos
  • 4
  • 3
7 Comments
 
LVL 32

Accepted Solution

by:
endital1097 earned 500 total points
ID: 33694110
yes, run that command from one (if both use the same cert)
it will generate the renewal request

do it on both if they use unique certs
get-exchangecertificate
view certificatedomains value
0
 

Author Comment

by:ney_santos
ID: 33694365
And how do I re-subscribe the edge server?

Tks
0
 
LVL 32

Expert Comment

by:endital1097
ID: 33694417
you shouldn't need to re-subscribe the edge server for a cert renewal
0
Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

 

Author Comment

by:ney_santos
ID: 33694516
And What about this:

"If this warning occurred on an Edge Transport server, you must create the internal transport certificate on the Edge Transport server where the warning occurred. After you have created the certificate, resubscribe the Edge Transport server to the Exchange organization to update the certificate information in Active Directory."

http://www.microsoft.com/technet/support/ee/transform.aspx?ProdName=Exchange&ProdVer=8.0&EvtID=12015&EvtSrc=MSExchangeTransport&LCID=1033

0
 
LVL 32

Expert Comment

by:endital1097
ID: 33694621
0
 

Author Comment

by:ney_santos
ID: 33719900
Hi there,

It didn't work. On the Edge Server I typed:

1º Get-ExchangeCertificate -Thumbprint DC99BE55D00A391B6DB89B0B019C15A89D33XXXX | New-ExchangeCertificate

2º New-EdgeSubscription

I created the XML file, and so I went to the Hub server, removed the EX00 old subscription, and created the new one using the file created on EX00.

Soh I try the command:

Test-EdgeSynchronization

And I got this
Name                        : Ex00
LeaseHolder                 :
LeaseType                   : 0
ConnectionResult            : Failed
FailureDetail               : The LDAP server is unavailable.
LeaseExpiry                 : 1/1/0001 00:00:00
LastSynchronized            : 1/1/0001 00:00:00
CredentialStatus            : Skipped
TransportServerStatus       : Skipped
TransportConfigStatus       : Skipped
AcceptedDomainStatus        : Skipped
SendConnectorStatus         : Skipped
MessageClassificationStatus : Skipped
RecipientStatus             : Skipped
CredentialRecords           : Number of credentials 0

Did I forget something? Why the number of credentials is 0?
0
 

Author Comment

by:ney_santos
ID: 33744839
Got it. I had to restar the MS Exchange ADAM service on the Edge Servers.

Tks
0

Featured Post

Free book by J.Peter Bruzzese, Microsoft MVP

Are you using Office 365? Trying to set up email signatures but you’re struggling with transport rules and connectors? Let renowned Microsoft MVP J.Peter Bruzzese show you how in this exclusive e-book on Office 365 email signatures. Better yet, it’s free!

Join & Write a Comment

"Migrate" an SMTP relay receive connector to a new server using info from an old server.
Scam emails are a huge burden for many businesses. Spotting one is not always easy. Follow our tips to identify if an email you receive is a scam.
In this Micro Video tutorial you will learn the basics about Database Availability Groups and How to configure one using a live Exchange Server Environment. The video tutorial explains the basics of the Exchange server Database Availability grou…
This video discusses moving either the default database or any database to a new volume.

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now