Solved

The Exchange Certificate will expire warning

Posted on 2012-04-11
7
610 Views
Last Modified: 2012-04-12
On reboot of my server in the application log I get the following warning from the Source MSExchange Web Services.

The exchange certificate
cn=ServerA.domain

Issuer
cn=ServerA.domain


Serial number
###

Not Before
Install date of server

Not After
1 year from install date of server

Thumbprint
####

will expire on  (1 year from install date of server).

This certificate was issued by this server.  When a Get-ExchangeCertificate command is run I do not see the above listed certificate. When I check the EMC I see two certificates one issued by digicert and one issued by "Federation"; neither of which have that expiration date.  Where else can I find this certificate that is giving the error?
0
Comment
Question by:TuscarawasCountyAdmin
  • 4
  • 3
7 Comments
 
LVL 14

Expert Comment

by:isaman07
ID: 37833476
Launch internet explorer on your exchange server, tools---> internet options--->Content--->certificates
Check under trusted root certification authority and intermediate if you can find it. If the issuer is your exchange server itself you can safely delete that certificate, since your exchange already has other valid certificates used by IIS.
0
 
LVL 1

Author Comment

by:TuscarawasCountyAdmin
ID: 37834037
Sorry, I forgot to state that I had already done that also and there is nothing listed with the same expriation date or even close to it.
0
 
LVL 14

Expert Comment

by:isaman07
ID: 37834369
Check if there are any certificates applied by a GPO in active directory.
0
Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

 
LVL 1

Author Comment

by:TuscarawasCountyAdmin
ID: 37834393
There are none.
0
 
LVL 14

Accepted Solution

by:
isaman07 earned 500 total points
ID: 37834553
Did you check any sub site under IIS using the mentioned certificate?
0
 
LVL 1

Author Comment

by:TuscarawasCountyAdmin
ID: 37837163
Ah ha!  I found the certificate in there.  It is labelled temp.  I also see the two other certificates, my cert issued by digicert and the one by federation.  Is it safe to delete this temp certificate?  It must have been created by the vendor when our exchange server was installed.
0
 
LVL 14

Expert Comment

by:isaman07
ID: 37837755
Yes, it is safe, as long as you don't see it used in your EMC. But try to copy it just to be on the safe side.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
This article lists the top 5 free OST to PST Converter Tools. These tools save a lot of time for users when they want to convert OST to PST after their exchange server is no longer available or some other critical issue with exchange server or impor…
how to add IIS SMTP to handle application/Scanner relays into office 365.
This video demonstrates how to sync Microsoft Exchange Public Folders with smartphones using CodeTwo Exchange Sync and Exchange ActiveSync. To learn more about CodeTwo Exchange Sync and download the free trial, go to: http://www.codetwo.com/excha…

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now