Solved

Exchange 2010 Cert Renewal

Posted on 2012-03-23
8
566 Views
Last Modified: 2012-08-13
Hi,

My exchange cert is about to expire and I need to renew it.  In order to renew it I need to generate a new cert request using this method here correct? http://technet.microsoft.com/en-us/library/ee332322.aspx

The original cert request that we used to get the first/original license won't work correct?
0
Comment
Question by:Treadstone21
  • 4
  • 4
8 Comments
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 37757461
You don't need to create a new request - just renew with your cert provider and download the cert, then install the cert, repair the certificate store to add the private key and then enable the certificate.
0
 

Author Comment

by:Treadstone21
ID: 37758825
Ok, I have an issue where I have 4 servers.  Server1 has the HT and Mailbox role installed. Server2 with the HT role only, and Server3 and Server4 with the CAS role each and in the CAS array.

Now Server1, the server in question has the expiring cert.  So If I remove the SSL cert and uninstall the HT roll, will transport services automatically fail over to Server2?  Or can I remove the SSL cert and keep the HT installed for internal mailflow (using the self assigned cert)?
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 37759030
You don't need to remove a certificate to renew it.  Leave the existing one alone, renew it and then download / install the renewed certificate.
0
 

Author Comment

by:Treadstone21
ID: 37759356
It expires tomorrow and I don't have time to renew it.  I removed the CAS role earlier this month. So I think we should be ok if I remove the expiring ssl cert right? and leave the self assigned on.
0
How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 37759456
Self-signed certs won't work unless Exchange has been messed about with.

If you remove the cert - you will stop things that rely on it.

Renewing the cert takes minutes - you just need to renew it.  You won't have to go through the process of requesting it and waiting for approval - you just need to pay and renew, then download, import, repair the private key and enable - it is that simple.
0
 

Author Comment

by:Treadstone21
ID: 37759483
Thanks for your assistance/paitence.   So your saying the self assign won't work for internal mail flow only?
0
 
LVL 76

Accepted Solution

by:
Alan Hardisty earned 500 total points
ID: 37759490
It won't be a problem for internal mail-flow - but don't delete the old cert - there is no need.

Just renew the current cert asap and if you need help importing, adding the private key and enabling it, let me know.
0
 

Author Closing Comment

by:Treadstone21
ID: 38179378
Internal mailflow worked fine
0

Featured Post

Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

Join & Write a Comment

We are happy to announce a brand new addition to our line of acclaimed email signature management products – CodeTwo Email Signatures for Office 365.
Scam emails are a huge burden for many businesses. Spotting one is not always easy. Follow our tips to identify if an email you receive is a scam.
In this video we show how to create an Address List in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Organization >> Ad…
To show how to create a transport rule in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Rules tab.:  To cr…

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now