Solved

Exchange 2007 Certificate Error

Posted on 2011-09-29
7
242 Views
Last Modified: 2012-05-12
We started getting errors in Outlook "The secutiry certificate has expired or is not yet valid."  So, I went to Exchange Management Shell and created a new certificate using the following cmdlet: "Get-ExchangeCertificate -thumbprint 123456.... | New-ExchangeCertificate."  I, then used the Enable cmdlet with the new thumbprint and typed in SMTP as the Service name.  But, Outlook is still using the old certificate and is still giving the certificate error.  What am I doing wrong?  How do we get Exchange to use the new certificate?
0
Comment
Question by:randallh24704
  • 3
  • 2
  • 2
7 Comments
 
LVL 25

Expert Comment

by:-MAS
ID: 36815907
run this and check how many certificates are there and what are the services enabled for those

Get-Exchangecertificate

make sure you enabled services for the new certificate. And delete the expired certificate
0
 
LVL 25

Expert Comment

by:-MAS
ID: 36815922
run this and check how many certificates are there and what are the services enabled for those

Get-Exchangecertificate

make sure you enabled services for the new certificate. And delete the expired certificate
0
 

Author Comment

by:randallh24704
ID: 36816641
Using IIS, I removed the certificate, but somehow its still using it.  When I click on certificate details (on the error message) it shows me the expired certificate.
0
Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

 
LVL 12

Expert Comment

by:Deepu Chowdary
ID: 36816658
But before doing all this once restart the TRANSPORT service and check for the errors in event log.
If you get any post them here..
0
 

Accepted Solution

by:
randallh24704 earned 0 total points
ID: 36817035
OK...now Exchange is using the new certificate.
Had to Install to Trusted Authorities.
Now were getting "The name on the security certificate is invalid...."
0
 
LVL 12

Expert Comment

by:Deepu Chowdary
ID: 36817190
Ok on the top you must see the option to see the certificate.
check that once and see that you installed for that only.
Also see this once.
0
 

Author Closing Comment

by:randallh24704
ID: 36938212
figured out how to get it to accept the new certificate.  But, now it doesn't like the name....opening a new question for this.
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Learn to move / copy / export exchange contacts to iPhone without using any software. Also see the issues in configuration of exchange with iPhone to migrate contacts.
To show how to create a transport rule in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Rules tab.:  To cr…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…

828 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question