Solved

How do I export an SSL certificate from a TMG server?

Posted on 2011-09-13
8
533 Views
Last Modified: 2012-05-12
I have a Forefront TMG server that holds the SSL certificate for our Exchange 2010 OWA Server.  I am trying to request a new SSL since this one will expire soon.  I setup a certificates MMC and can see the certificate.  Whenever I try and request a new cert I receive the following "Enrollment error - The request contains no certificate information."

I found some links online that offer assistance, but so far no luck.  How can I get this cert off to get renewed?

Thanks in advance.
0
Comment
Question by:copio
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
  • 2
8 Comments
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 36532019
Not the way it is done. Request the new cert from the Exchange system, not the TMG box. When you get the new cert back import into the Exchange/iis server - then export it from Exchange (with the private key) and import to the TMG box. Edit the TMG listener and select the new cert - reboot the TMG.
0
 

Author Comment

by:copio
ID: 36532250
Keith, I can't see the OWA cert from the Exchange System.  Am I doing something wrong?
0
 
LVL 49

Expert Comment

by:Akhater
ID: 36532556
Open Exchange System Manager -> Server configuration

on the right hand side select your CAS server and look further on your right hand side you have an action to create a new exchange certificate
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 

Accepted Solution

by:
copio earned 0 total points
ID: 36575831
So I resolved it.  Here is what I did.

1.  I installed the IIS Manager role on the TMG Server.
2.  I was then able to create the CSR.
0
 

Author Closing Comment

by:copio
ID: 36597791
This is the solution that worked.
0
 
LVL 49

Expert Comment

by:Akhater
ID: 36575849
IIS role on tmg is not a good idea since both use port 80 and 443 and it was already pointed out to you that it should be done from Exchange and not from IIS
0
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 36575892
Absolutely mental
0
 

Author Comment

by:copio
ID: 36575937
Keith,

I agree with you 110%.  I've done CSR/s in the past.  I'm a consultant and some genius decided to put the OWA SSL on the TMG.  I have no idea how it got there since IIS was not installed on the TMG.  I had to install the ISS MANAGER ONLY - NOT IIS <-- to generate the CSR.  Hopefully it will be placed on the Exchange Server and not the TMG.  Complete messes are usually left for me by all the clients I support.  I tend to find some geniuses out there.  :-p
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article explains in simple steps how to renew expiring Exchange Server Internal Transport Certificate.
After hours on line I found a solution which pointed to the inherited Active Directory permissions . You have to give/allow permissions to the "Exchange trusted subsystem" for the user in the Active Directory...
In this video we show how to create a Contact in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Contact ta…
In this video we show how to create a mailbox database in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Servers >> Data…

739 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question