Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Exchange 2010 Cert Renewal

Posted on 2012-03-23
8
Medium Priority
?
582 Views
Last Modified: 2012-08-13
Hi,

My exchange cert is about to expire and I need to renew it.  In order to renew it I need to generate a new cert request using this method here correct? http://technet.microsoft.com/en-us/library/ee332322.aspx

The original cert request that we used to get the first/original license won't work correct?
0
Comment
Question by:Treadstone21
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 4
8 Comments
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 37757461
You don't need to create a new request - just renew with your cert provider and download the cert, then install the cert, repair the certificate store to add the private key and then enable the certificate.
0
 

Author Comment

by:Treadstone21
ID: 37758825
Ok, I have an issue where I have 4 servers.  Server1 has the HT and Mailbox role installed. Server2 with the HT role only, and Server3 and Server4 with the CAS role each and in the CAS array.

Now Server1, the server in question has the expiring cert.  So If I remove the SSL cert and uninstall the HT roll, will transport services automatically fail over to Server2?  Or can I remove the SSL cert and keep the HT installed for internal mailflow (using the self assigned cert)?
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 37759030
You don't need to remove a certificate to renew it.  Leave the existing one alone, renew it and then download / install the renewed certificate.
0
Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 

Author Comment

by:Treadstone21
ID: 37759356
It expires tomorrow and I don't have time to renew it.  I removed the CAS role earlier this month. So I think we should be ok if I remove the expiring ssl cert right? and leave the self assigned on.
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 37759456
Self-signed certs won't work unless Exchange has been messed about with.

If you remove the cert - you will stop things that rely on it.

Renewing the cert takes minutes - you just need to renew it.  You won't have to go through the process of requesting it and waiting for approval - you just need to pay and renew, then download, import, repair the private key and enable - it is that simple.
0
 

Author Comment

by:Treadstone21
ID: 37759483
Thanks for your assistance/paitence.   So your saying the self assign won't work for internal mail flow only?
0
 
LVL 76

Accepted Solution

by:
Alan Hardisty earned 2000 total points
ID: 37759490
It won't be a problem for internal mail-flow - but don't delete the old cert - there is no need.

Just renew the current cert asap and if you need help importing, adding the private key and enabling it, let me know.
0
 

Author Closing Comment

by:Treadstone21
ID: 38179378
Internal mailflow worked fine
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Are you looking for the options available for exporting EDB files to PST? You may be confused as they are different in different Exchange versions. Here, I will discuss some options available.
If something goes wrong with Exchange, your IT resources are in trouble.All Exchange server migration processes are not designed to be identical and though migrating email from on-premises Exchange mailbox to Cloud’s Office 365 is relatively simple…
how to add IIS SMTP to handle application/Scanner relays into office 365.
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…
Suggested Courses

597 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question