PrivateKeyMissing

I installed Exchange 2010 with SP1 rollup 5 on 2K8 R2 server and am having the following certificate issues.

I have a separate AD server with AD Certificate Services installed to issue certificates.
I generated the request from the EMC for a wildcard certificate, open up the file and copy the contents and paste it into the web based certificate request form from AD server. It creates two cert files, certnew.cer and certnew.p7b.
I use the MMC for Certificates and install the certnew.p7b in the Intermediate Certificate Authorities, then go to the EMC to complete the pending request. It appears to install correctly, but then disappears from the EMC.
I found on this site where others said the GUI is flakey, so I followed the commands using the  Exchange Management Shell from this http://www.experts-exchange.com/Software/Server_Software/Email_Servers/Exchange/Q_26722561.html It returns the following error...
The certificate with thumbprint blahblahblah was found but is not valid for use with Exchange Server (reason: PrivateKeyMissing)

Where did I go wrong and how can I fix?
pjmac28Director of Information TechnologyAsked:
Who is Participating?
 
ShmoidConnect With a Mentor Senior EngineerCommented:
Try removing the autodiscovery entries before creating the CSR. See this post for more info:

http://www.experts-exchange.com/Software/Server_Software/Email_Servers/Exchange/Q_26898487.html
0
 
ShmoidSenior EngineerCommented:
In the steps you outlined in your post you said you used the .p7b file to install the Certificate Authority. But when you go back to the EMC you didn't specify if you used the .p7b file or the .cer file. If you are using the .p7b file it will not work. You must use the .cer file.
0
 
pjmac28Director of Information TechnologyAuthor Commented:
Correct, I used the .cer file with the EMC & EMS...sorry for not clarifying.
0
Worried about phishing attacks?

90% of attacks start with a phish. It’s critical that IT admins and MSSPs have the right security in place to protect their end users from these phishing attacks. Check out our latest feature brief for tips and tricks to keep your employees off a hackers line!

 
pjmac28Director of Information TechnologyAuthor Commented:
The certificate installed, but now shows under the status of the EMC that it is invalid for Exchange Server usage.

When I submitted it to the web based request form, I selected Web Server as the Certificate Template, as the other options are: User, Basic EFS, Administrator, EFS Recovery Agent, Subordinate Certification Authority.
0
 
pjmac28Director of Information TechnologyAuthor Commented:
When I look at the properties of the installed certificate, it displays: This certificate cannot be verified up to a trusted certification authority.
0
 
pjmac28Director of Information TechnologyAuthor Commented:
I just install the .p7b file to the Trusted Root Certification Authorities folder in the Certificates Console and now the certificate show in EMC as valid. :)
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.