Avatar of tganus
tganus
 asked on

SSL Certificate renewal not working on Exchange 2003

Hi Experts!

We've got a customer with an SSL certificate that expired and we tried to renew it.  Everything works with the CSR request, but when we get the certificate back via email from our SSL provider, it won't import the certificate.  Currently, I've manually imported the certificate (using the certificates add-in in MMC) and have attached the proper certificate (meaning it has the new expiration date) to the Default Website (the one that contains /exchange).  However, it's not working.  Anyone have some ideas I can try?  I've disabled the "default" Rapid SSL certificate and imported the certificate authority that they sent.  We're stuck and the customer can't get email via smart phones or web.

Thanks!
SSL / HTTPSExchangeMicrosoft IIS Web Server

Avatar of undefined
Last Comment
tganus

8/22/2022 - Mon
tganus

ASKER
I've even tried deleting the certificate and going through the entire process (by creating a new certificate request in directory security).  But it refuses to import the .cer file I create and talks about private keys (sorry I don't have the exact error message)...
tganus

ASKER
Here's the exact error message when I try to import the .cer file:

The pending certificate request for this response file was not found.  This request may be canceled.  You cannot install selected response certificate using this Wizard.
ASKER CERTIFIED SOLUTION
Simon Butler (Sembee)

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
tganus

ASKER
I got a new SSL certificate (a wildcard this time) from our provider and went through the entire process and it worked.  But, I can't access my website.  It's not giving me any errors or anything, even local https://servername doesn't work.  I'm lost.
Your help has saved me hundreds of hours of internet surfing.
fblack61
Simon Butler (Sembee)

Check in IIS manager that you have the correct bindings. You should have two - 80 and 443.

Simon.
tganus

ASKER
Simon,

Thanks for the help.  Ended up doing the new certificate and it worked, but I had followed some instructions elsewhere on EE about doing the certificate renewal with a temporary website.  IIS had started the temp website instead of "Default Website".  Once I deleted the temporary one, all is well.  Still would have liked to figure out the corruption of the old one, but completely new SSL certificate wins.  Thanks!