?
Solved

import cert to exchange 2010 that was generated on another server

Posted on 2012-03-21
10
Medium Priority
?
1,014 Views
Last Modified: 2012-03-26
I generated the csr and obtained my wildcard cert for my domain using cpanel.
I have a .cer file downloaded from godaddy to import into exchange 2010. however it won't import into exchange certificates so that i can assign it to services.

how can i import the CSR generated from cpanel and then import the cert file to show up?

i can import the cert obviously into certificate management mmc however then it doesn't show up under Exchange Certificates.
0
Comment
Question by:deeburp
  • 5
  • 4
10 Comments
 
LVL 3

Expert Comment

by:cfletch1980
ID: 37750769
try using powershell command to import certificate being you generated CSR on another server.


Import-ExchangeCertificate -FileData ([Byte[]]$(Get-Content -Path <path of cert> -Encoding byte -ReadCount 0)) | Enable-ExchangeCertificate -Services "IIS,POP,IMAP,SMTP"

Where only the desired services are specified by the Enable-ExchangeCertificate portion of the command.
0
 
LVL 1

Author Comment

by:deeburp
ID: 37750784
I get this when running it
Enable-ExchangeCertificate : The certificate with thumbprint 5C084BC930190136875DC9570E77EC9C9ABD4AB7 was found but is
not valid for use with Exchange Server (reason: PrivateKeyMissing).

how can i add the private key file?
0
 
LVL 3

Assisted Solution

by:cfletch1980
cfletch1980 earned 800 total points
ID: 37750795
check this http://www.digicert.com/ssl-support/exchange-2007-wildcards.htm

http://www.digicert.com/ssl-support/troubleshooting-exchange-2007.htm

Try taking POP and IMAP out of the services enabled to use that certificate

Why did you not use exchange console to generate certificate. Its pretty simple using EMC and importing the certificate in Exchange 2007/2010
0
Free tool for managing users' photos in Office 365

Easily upload multiple users’ photos to Office 365. Manage them with an intuitive GUI and use handy built-in cropping and resizing options. Link photos with users based on Azure AD attributes. Free tool!

 
LVL 1

Author Comment

by:deeburp
ID: 37750798
the cert we have for the wildcard is already generated and installed on other servers and was generated using one of them.
0
 
LVL 3

Expert Comment

by:cfletch1980
ID: 37750811
installed on other exchange servers?

Try imputing through EMC -> Highlight Server Configuration and you should see option on right panel
0
 
LVL 1

Author Comment

by:deeburp
ID: 37750839
no per my original post. the cert request was done via Cpanel. and the cert is installed and used via that server

i have the csr, key and the crt file. how can i import this information into exchange/windows certificate so that exchange can use it too?
0
 
LVL 3

Expert Comment

by:cfletch1980
ID: 37750846
do get-ExchangeCertificate and paste results to verify the first part of the powershell command worked installing your certificate.
0
 
LVL 1

Accepted Solution

by:
deeburp earned 0 total points
ID: 37750908
Ok i got it working..

Have to use openssl to combine the Key file (used during the CSR generation part) and the Crt file from the CA (in my case godaddy)

this site helped in making the pfx file.
http://conshell.net/wiki/index.php/Keytool_to_OpenSSL_Conversion_tips

Note openssl is installed on macs by default so i used that to make the file.
0
 
LVL 1

Author Closing Comment

by:deeburp
ID: 37765004
the openssl allowed for the combination for a pfx file which exchange EMC can import properly
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Microsoft Jet database engine errors can crop up out of nowhere to disrupt the working of the Exchange server. Decoding why a particular error occurs goes a long way in determining the right solution for it.
Upgrading from older Exchange server to the latest Exchange server can be tiresome, error-prone and risky, without being a seasoned exchange server administrators. It can become even problematic if you're an organization that runs on tight timeline…
This video shows how to quickly and easily deploy an email signature for all users in Office 365 and prevent it from being added to replies and forwards. (the resulting signature is applied on the server level in Exchange Online) The email signat…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…
Suggested Courses
Course of the Month3 days, 23 hours left to enroll

599 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question