Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 152
  • Last Modified:

How to renew an expired SMTP certificate for Exchange Server 2007 SP2?

Dear Experts,

I have an exchange expired certificate and I got an error message from the Application log of theEvent Viewer informing that "There is no valid SMTP Transport Layer Security (TLS) certificate... ". The event source is "MSExchangeTransport", th event category is "TransportService " and the event ID is "12016".

I have searched about it on Mycrosoft Help and Support Center but it drives me to Exchange 2010 page.

Many thanks for the help,

ExhAdmin.
0
lhiadmin
Asked:
lhiadmin
  • 4
1 Solution
 
SriHarsha KTechnical Services SpecialistCommented:
Is it a third party cerificate or Self signed..
use the below command in exchange management shell to check the same,
>get-ExchangeCertificate | fl
This gives the list of cerificates available,then check for the certificate which has expired.there u can find whether it is selfsigned or not.

If its a third party then contact the relavent vendor.If its self signed the we can renew using the below command..
Enable-ExchangeCertificate ..

Remember to remove the old certificate once the new one is created successfully.

Check this link to renew the self-signed certificate,

http://exchangepedia.com/2008/01/exchange-server-2007-renewing-the-self-signed-certificate.html
0
 
SriHarsha KTechnical Services SpecialistCommented:
When you run the command, get-exchangecertificate | fl  ,
It will give you a list of all the certificates in your organization.

Example,

AccessRules        : {System.Security.AccessControl.CryptoKeyAccessRule, System
                     .Security.AccessControl.CryptoKeyAccessRule, System.Securi
                     ty.AccessControl.CryptoKeyAccessRule}
CertificateDomains : {Sites, ABCS.BAC.local}
HasPrivateKey      : True
IsSelfSigned       : False
Issuer             : CN=ABCS-BAC.CA
NotAfter           : 12/1/2011 1:57:53 PM
NotBefore          : 12/1/2009 1:57:53 PM
PublicKeySize      : 2048
RootCAType         : Registry
SerialNumber       : 611DA746000000000002
Services           : IMAP, POP, SMTP
Status             : Valid
Subject            : CN=Sites
Thumbprint         : 3B247F90803C53FF6D84DC562CBC5CC9777FFFE0
---------------------------------------------------------------------------------------------------------------------

here you check for ,
IsSelfSigned       : False  (False=3rd party, True=Selfsigned)
Issuer             : Issuer Name (If its a 3rd party then there name will be present here and you can contact them to renew the certificate from their end)

Hope its clear...

Cheers,...
0
 
SriHarsha KTechnical Services SpecialistCommented:
Note : lhiadmin, you are looking for the answer in the wrong place.
Please select the appropriate topic so that you will be guided with quick response.

As this is an exchange related question.we can select Exchange as the topic instead of Miscellaneous.

Have a great time..
0
 
lhiadminAuthor Commented:
Also a very good content on the link. I was able to find complementar information searching on the site libery. See the link below:

http://exchangetimes.wordpress.com/2010/12/28/renewing-tls-certificate-on-a-hub-transport-server/
0
 
SriHarsha KTechnical Services SpecialistCommented:
thats really good.

Thank You.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 4
Tackle projects and never again get stuck behind a technical roadblock.
Join Now