Solved

import cert to exchange 2010 that was generated on another server

Posted on 2012-03-21
10
989 Views
Last Modified: 2012-03-26
I generated the csr and obtained my wildcard cert for my domain using cpanel.
I have a .cer file downloaded from godaddy to import into exchange 2010. however it won't import into exchange certificates so that i can assign it to services.

how can i import the CSR generated from cpanel and then import the cert file to show up?

i can import the cert obviously into certificate management mmc however then it doesn't show up under Exchange Certificates.
0
Comment
Question by:deeburp
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 4
10 Comments
 
LVL 3

Expert Comment

by:cfletch1980
ID: 37750769
try using powershell command to import certificate being you generated CSR on another server.


Import-ExchangeCertificate -FileData ([Byte[]]$(Get-Content -Path <path of cert> -Encoding byte -ReadCount 0)) | Enable-ExchangeCertificate -Services "IIS,POP,IMAP,SMTP"

Where only the desired services are specified by the Enable-ExchangeCertificate portion of the command.
0
 
LVL 1

Author Comment

by:deeburp
ID: 37750784
I get this when running it
Enable-ExchangeCertificate : The certificate with thumbprint 5C084BC930190136875DC9570E77EC9C9ABD4AB7 was found but is
not valid for use with Exchange Server (reason: PrivateKeyMissing).

how can i add the private key file?
0
 
LVL 3

Assisted Solution

by:cfletch1980
cfletch1980 earned 200 total points
ID: 37750795
check this http://www.digicert.com/ssl-support/exchange-2007-wildcards.htm

http://www.digicert.com/ssl-support/troubleshooting-exchange-2007.htm

Try taking POP and IMAP out of the services enabled to use that certificate

Why did you not use exchange console to generate certificate. Its pretty simple using EMC and importing the certificate in Exchange 2007/2010
0
U.S. Department of Agriculture and Acronis Access

With the new era of mobile computing, smartphones and tablets, wireless communications and cloud services, the USDA sought to take advantage of a mobilized workforce and the blurring lines between personal and corporate computing resources.

 
LVL 1

Author Comment

by:deeburp
ID: 37750798
the cert we have for the wildcard is already generated and installed on other servers and was generated using one of them.
0
 
LVL 3

Expert Comment

by:cfletch1980
ID: 37750811
installed on other exchange servers?

Try imputing through EMC -> Highlight Server Configuration and you should see option on right panel
0
 
LVL 1

Author Comment

by:deeburp
ID: 37750839
no per my original post. the cert request was done via Cpanel. and the cert is installed and used via that server

i have the csr, key and the crt file. how can i import this information into exchange/windows certificate so that exchange can use it too?
0
 
LVL 3

Expert Comment

by:cfletch1980
ID: 37750846
do get-ExchangeCertificate and paste results to verify the first part of the powershell command worked installing your certificate.
0
 
LVL 19

Expert Comment

by:suriyaehnop
ID: 37750906
0
 
LVL 1

Accepted Solution

by:
deeburp earned 0 total points
ID: 37750908
Ok i got it working..

Have to use openssl to combine the Key file (used during the CSR generation part) and the Crt file from the CA (in my case godaddy)

this site helped in making the pfx file.
http://conshell.net/wiki/index.php/Keytool_to_OpenSSL_Conversion_tips

Note openssl is installed on macs by default so i used that to make the file.
0
 
LVL 1

Author Closing Comment

by:deeburp
ID: 37765004
the openssl allowed for the combination for a pfx file which exchange EMC can import properly
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A procedure for exporting installed hotfix details of remote computers using powershell
This article lists the top 5 free OST to PST Converter Tools. These tools save a lot of time for users when they want to convert OST to PST after their exchange server is no longer available or some other critical issue with exchange server or impor…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…

761 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question