Solved

import cert to exchange 2010 that was generated on another server

Posted on 2012-03-21
10
982 Views
Last Modified: 2012-03-26
I generated the csr and obtained my wildcard cert for my domain using cpanel.
I have a .cer file downloaded from godaddy to import into exchange 2010. however it won't import into exchange certificates so that i can assign it to services.

how can i import the CSR generated from cpanel and then import the cert file to show up?

i can import the cert obviously into certificate management mmc however then it doesn't show up under Exchange Certificates.
0
Comment
Question by:deeburp
  • 5
  • 4
10 Comments
 
LVL 3

Expert Comment

by:cfletch1980
ID: 37750769
try using powershell command to import certificate being you generated CSR on another server.


Import-ExchangeCertificate -FileData ([Byte[]]$(Get-Content -Path <path of cert> -Encoding byte -ReadCount 0)) | Enable-ExchangeCertificate -Services "IIS,POP,IMAP,SMTP"

Where only the desired services are specified by the Enable-ExchangeCertificate portion of the command.
0
 
LVL 1

Author Comment

by:deeburp
ID: 37750784
I get this when running it
Enable-ExchangeCertificate : The certificate with thumbprint 5C084BC930190136875DC9570E77EC9C9ABD4AB7 was found but is
not valid for use with Exchange Server (reason: PrivateKeyMissing).

how can i add the private key file?
0
 
LVL 3

Assisted Solution

by:cfletch1980
cfletch1980 earned 200 total points
ID: 37750795
check this http://www.digicert.com/ssl-support/exchange-2007-wildcards.htm

http://www.digicert.com/ssl-support/troubleshooting-exchange-2007.htm

Try taking POP and IMAP out of the services enabled to use that certificate

Why did you not use exchange console to generate certificate. Its pretty simple using EMC and importing the certificate in Exchange 2007/2010
0
VMware Disaster Recovery and Data Protection

In this expert guide, you’ll learn about the components of a Modern Data Center. You will use cases for the value-added capabilities of Veeam®, including combining backup and replication for VMware disaster recovery and using replication for data center migration.

 
LVL 1

Author Comment

by:deeburp
ID: 37750798
the cert we have for the wildcard is already generated and installed on other servers and was generated using one of them.
0
 
LVL 3

Expert Comment

by:cfletch1980
ID: 37750811
installed on other exchange servers?

Try imputing through EMC -> Highlight Server Configuration and you should see option on right panel
0
 
LVL 1

Author Comment

by:deeburp
ID: 37750839
no per my original post. the cert request was done via Cpanel. and the cert is installed and used via that server

i have the csr, key and the crt file. how can i import this information into exchange/windows certificate so that exchange can use it too?
0
 
LVL 3

Expert Comment

by:cfletch1980
ID: 37750846
do get-ExchangeCertificate and paste results to verify the first part of the powershell command worked installing your certificate.
0
 
LVL 18

Expert Comment

by:suriyaehnop
ID: 37750906
0
 
LVL 1

Accepted Solution

by:
deeburp earned 0 total points
ID: 37750908
Ok i got it working..

Have to use openssl to combine the Key file (used during the CSR generation part) and the Crt file from the CA (in my case godaddy)

this site helped in making the pfx file.
http://conshell.net/wiki/index.php/Keytool_to_OpenSSL_Conversion_tips

Note openssl is installed on macs by default so i used that to make the file.
0
 
LVL 1

Author Closing Comment

by:deeburp
ID: 37765004
the openssl allowed for the combination for a pfx file which exchange EMC can import properly
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Learn to move / copy / export exchange contacts to iPhone without using any software. Also see the issues in configuration of exchange with iPhone to migrate contacts.
A procedure for exporting installed hotfix details of remote computers using powershell
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…

785 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question