Solved

The Exchange Certificate will expire warning

Posted on 2012-04-11
7
608 Views
Last Modified: 2012-04-12
On reboot of my server in the application log I get the following warning from the Source MSExchange Web Services.

The exchange certificate
cn=ServerA.domain

Issuer
cn=ServerA.domain


Serial number
###

Not Before
Install date of server

Not After
1 year from install date of server

Thumbprint
####

will expire on  (1 year from install date of server).

This certificate was issued by this server.  When a Get-ExchangeCertificate command is run I do not see the above listed certificate. When I check the EMC I see two certificates one issued by digicert and one issued by "Federation"; neither of which have that expiration date.  Where else can I find this certificate that is giving the error?
0
Comment
Question by:TuscarawasCountyAdmin
  • 4
  • 3
7 Comments
 
LVL 14

Expert Comment

by:isaman07
Comment Utility
Launch internet explorer on your exchange server, tools---> internet options--->Content--->certificates
Check under trusted root certification authority and intermediate if you can find it. If the issuer is your exchange server itself you can safely delete that certificate, since your exchange already has other valid certificates used by IIS.
0
 
LVL 1

Author Comment

by:TuscarawasCountyAdmin
Comment Utility
Sorry, I forgot to state that I had already done that also and there is nothing listed with the same expriation date or even close to it.
0
 
LVL 14

Expert Comment

by:isaman07
Comment Utility
Check if there are any certificates applied by a GPO in active directory.
0
Do email signature updates give you a headache?

Do you feel like you are constantly making changes to email signatures? Are the images not formatting how you want them to? Want high-quality HTML signatures on all devices, including on mobiles and Macs? Then, let Exclaimer solve all your email signature problems today.

 
LVL 1

Author Comment

by:TuscarawasCountyAdmin
Comment Utility
There are none.
0
 
LVL 14

Accepted Solution

by:
isaman07 earned 500 total points
Comment Utility
Did you check any sub site under IIS using the mentioned certificate?
0
 
LVL 1

Author Comment

by:TuscarawasCountyAdmin
Comment Utility
Ah ha!  I found the certificate in there.  It is labelled temp.  I also see the two other certificates, my cert issued by digicert and the one by federation.  Is it safe to delete this temp certificate?  It must have been created by the vendor when our exchange server was installed.
0
 
LVL 14

Expert Comment

by:isaman07
Comment Utility
Yes, it is safe, as long as you don't see it used in your EMC. But try to copy it just to be on the safe side.
0

Featured Post

Better Security Awareness With Threat Intelligence

See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

Join & Write a Comment

This process describes the steps required to Import and Export data from and to .pst files using Exchange 2010. We can use these steps to export data from a user to a .pst file, import data back to the same or a different user, or even import data t…
Learn to move / copy / export exchange contacts to iPhone without using any software. Also see the issues in configuration of exchange with iPhone to migrate contacts.
In this video we show how to create an Address List in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Organization >> Ad…
To show how to generate a certificate request in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Servers >> Certificates…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now