?
Solved

import cert to exchange 2010 that was generated on another server

Posted on 2012-03-21
10
Medium Priority
?
1,002 Views
Last Modified: 2012-03-26
I generated the csr and obtained my wildcard cert for my domain using cpanel.
I have a .cer file downloaded from godaddy to import into exchange 2010. however it won't import into exchange certificates so that i can assign it to services.

how can i import the CSR generated from cpanel and then import the cert file to show up?

i can import the cert obviously into certificate management mmc however then it doesn't show up under Exchange Certificates.
0
Comment
Question by:deeburp
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 4
10 Comments
 
LVL 3

Expert Comment

by:cfletch1980
ID: 37750769
try using powershell command to import certificate being you generated CSR on another server.


Import-ExchangeCertificate -FileData ([Byte[]]$(Get-Content -Path <path of cert> -Encoding byte -ReadCount 0)) | Enable-ExchangeCertificate -Services "IIS,POP,IMAP,SMTP"

Where only the desired services are specified by the Enable-ExchangeCertificate portion of the command.
0
 
LVL 1

Author Comment

by:deeburp
ID: 37750784
I get this when running it
Enable-ExchangeCertificate : The certificate with thumbprint 5C084BC930190136875DC9570E77EC9C9ABD4AB7 was found but is
not valid for use with Exchange Server (reason: PrivateKeyMissing).

how can i add the private key file?
0
 
LVL 3

Assisted Solution

by:cfletch1980
cfletch1980 earned 800 total points
ID: 37750795
check this http://www.digicert.com/ssl-support/exchange-2007-wildcards.htm

http://www.digicert.com/ssl-support/troubleshooting-exchange-2007.htm

Try taking POP and IMAP out of the services enabled to use that certificate

Why did you not use exchange console to generate certificate. Its pretty simple using EMC and importing the certificate in Exchange 2007/2010
0
Optimize your web performance

What's in the eBook?
- Full list of reasons for poor performance
- Ultimate measures to speed things up
- Primary web monitoring types
- KPIs you should be monitoring in order to increase your ROI

 
LVL 1

Author Comment

by:deeburp
ID: 37750798
the cert we have for the wildcard is already generated and installed on other servers and was generated using one of them.
0
 
LVL 3

Expert Comment

by:cfletch1980
ID: 37750811
installed on other exchange servers?

Try imputing through EMC -> Highlight Server Configuration and you should see option on right panel
0
 
LVL 1

Author Comment

by:deeburp
ID: 37750839
no per my original post. the cert request was done via Cpanel. and the cert is installed and used via that server

i have the csr, key and the crt file. how can i import this information into exchange/windows certificate so that exchange can use it too?
0
 
LVL 3

Expert Comment

by:cfletch1980
ID: 37750846
do get-ExchangeCertificate and paste results to verify the first part of the powershell command worked installing your certificate.
0
 
LVL 1

Accepted Solution

by:
deeburp earned 0 total points
ID: 37750908
Ok i got it working..

Have to use openssl to combine the Key file (used during the CSR generation part) and the Crt file from the CA (in my case godaddy)

this site helped in making the pfx file.
http://conshell.net/wiki/index.php/Keytool_to_OpenSSL_Conversion_tips

Note openssl is installed on macs by default so i used that to make the file.
0
 
LVL 1

Author Closing Comment

by:deeburp
ID: 37765004
the openssl allowed for the combination for a pfx file which exchange EMC can import properly
0

Featured Post

Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

After hours on line I found a solution which pointed to the inherited Active Directory permissions . You have to give/allow permissions to the "Exchange trusted subsystem" for the user in the Active Directory...
I was prompted to write this article after the recent World-Wide Ransomware outbreak. For years now, System Administrators around the world have used the excuse of "Waiting a Bit" before applying Security Patch Updates. This type of reasoning to me …
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…
This video demonstrates how to sync Microsoft Exchange Public Folders with smartphones using CodeTwo Exchange Sync and Exchange ActiveSync. To learn more about CodeTwo Exchange Sync and download the free trial, go to: http://www.codetwo.com/excha…
Suggested Courses
Course of the Month13 days, 17 hours left to enroll

801 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question