Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 412
  • Last Modified:

Exchange 2010 Certificate Problem

Setup a new SBS 2011.

Bought a SSL certificate from GoDaddy.

Got it installed and it says it is expired.

I have a bunch of other certificates installed. Should I remove them all? Would I need them at all for anything or do I just need the godaddy?
EE---Exchange-Certificates.JPG
0
MJCS
Asked:
MJCS
  • 8
  • 3
  • 2
4 Solutions
 
Manpreet SIngh KhatraSolutions Architect, Project LeadCommented:
I guess you need to get in tough with GoDaddy for the xpired certs and get them to renew it and then install it.

The ones with none (Services arent used rest seem to be used for something so not sure if removing them is safe)

- Rancy
0
 
MJCSAuthor Commented:
Most of them seem to be redundant. 4 of them say IMAP, POP, SMTP.

Off the cuff, It seems like either all of them could go, or maybe the one with IIS stays...

But want a 2nd, 3rd, 4th opinion
0
 
Manpreet SIngh KhatraSolutions Architect, Project LeadCommented:
Are the others Self signed ? Were the Imported or just used for creting a cert from soem cert authority ?

When you hit Get-ExchangeCertificates how many are listed ?

- Rancy
0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
MJCSAuthor Commented:
Where do I do that?
0
 
MJCSAuthor Commented:
I have removed, re-keyed, and re-installed this 3x.

It completes without error and then is immediately expired.
0
 
suriyaehnopCommented:
OWALike Rancy said you use Exchange Management Shell and run Get-ExchangeCertificate and select the 1st thumbprint then run Get-ExchangeCertificate -thumbprint <thumbprint> | Format-List

else open your OWA to verify the certificate information.

If the certifcate is expired, I would like to advice you to contact GoDaddy and inform them about it.
0
 
MJCSAuthor Commented:
This is what it shows on the certificate.

This is what I get from Get-ExchangeCertificate

The term 'Get-ExchangeCertificate' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again.
At line:1 char:24

It looks like Exchange 2010 management tools aren't installed
EE---EC---02.JPG
EE---EC---03.JPG
0
 
MJCSAuthor Commented:
my bad, finalyl figured out where to run that.

It brings up as many certificates as I've got in the gui.

I think I'm going to uninstall all of them and then rekey godaddy.
0
 
MJCSAuthor Commented:
So I'm just about there.

I downloaded and isntalled Exchange SP2.

I restarted.

I went in to remove my extra certificates, I noticed that my GoDaddy wasn't failing anymore.

I ran "Remote Connectivity Analyzer"

Still failing some.

I removed the blank certificates and retested.

I removed the other SMPT & Pop certificates and retested.

I tried to remove the rest but IIS was bound to the top one and wouldn't let go.

I assinged SMTP and IIS to my godaddy Certificate and retested.

All good except for remote.domain.com

I had to create an A record for that and am wating for it to propgate.
0
 
suriyaehnopCommented:
Certificate pathYour certificate is not expired. It will expired on 2015. Check on Certificate path tab to verify the certificate path is ok.
0
 
MJCSAuthor Commented:
It seems as if the problem was related to all of those certificates that were in there.
0
 
Manpreet SIngh KhatraSolutions Architect, Project LeadCommented:
Awesome .... sorry was away from site .... so issue fixed :)

- Rancy
0
 
MJCSAuthor Commented:
I was able to figure out most of this on my own through trial and error.
0

Featured Post

Veeam Disaster Recovery in Microsoft Azure

Veeam PN for Microsoft Azure is a FREE solution designed to simplify and automate the setup of a DR site in Microsoft Azure using lightweight software-defined networking. It reduces the complexity of VPN deployments and is designed for businesses of ALL sizes.

  • 8
  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now