Link to home
Start Free TrialLog in
Avatar of AhmedAliShaik
AhmedAliShaikFlag for India

asked on

Event ID for Certificates which are about to expire.

Team,

Just want to know the event id of the SSL certificates which are about to expire.

So that I can write a powershell script and proactively monitor.



Do we have seperate event ids based on Application like Exchange or ...

Please share ur views.
SOLUTION
Avatar of Ciprian Lozonschi
Ciprian Lozonschi
Flag of Czechia image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of AhmedAliShaik

ASKER

Hi Bchallis,

Could you please elaborate how to run this command.

Can we get the output of the command so that i can add mail function to this and send an alert regarding certificate expiry.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
The scipt is really excellent and working perfectly.

I am trying to user other tools to generate the expiry report and really not aware exchange shell is so powerful to retrieve the same.

Last Question.
The shell scirpt is retriving inf of only one server.
Is there any way to identify all exchange 2003 and 2007 servers and display in csv format or can we give inout with all the servers list and run the report to get the cert exp details of all servers.
Hi Bchallis,

I am getiing all the certificates which has already expired including root,intermediate and local certificate.

Is there any way that i can sort the output to get only the local certificate which are going to expire or can i run the script with only "XXXX" friendly name and get the desired output.

Please advice me.
Hi, you should use Get-ExchangeCertificate and filter based on your needes. Unfortunately this cmdlet is running only local
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Hi lciprianionut,

I tried using the Get-ExchangeCertificate for getting the local cert details but failed.
Is there any possibility to get the result based on friendly name.

If so can u share few examples.

The article provided by bchallis is good. It will take time for me to go through understand and follow.
i will try it by weekend. Meanwhile just out of curiosity wanna know the get-exchange certificate command because i am not sure whether i may get approvals to make changes in production environment as per the link.
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Thanks All.