Solved

Exchange 2010 - which certificates do I migrate?

Posted on 2014-02-16
5
144 Views
Last Modified: 2014-03-02
I am migrating from an Exchange 2007 server to an Exchange 2010 server.  I am ready to move the security certificate(s).

In the attached file, you will see several certificates.  Which of these do I need to move?  The one ending in 1146 seems to be the right one.  But what about some of the others.  Some are self-signed and not expired but are marked "invalid".  Others are both invalid and expired (I'm sure I can ignore these).

But are any of these worth worrying about?
certs.bmp
0
Comment
Question by:crapshooter
5 Comments
 
LVL 4

Assisted Solution

by:Andy Navi
Andy Navi earned 167 total points
Comment Utility
Hello,

If the certificate you are telling that is 1146, if that certificate is of Third Party,like globalsign, godaddy etc. then this is only you need to export to Exchange 2010 and enable the services which you need.

Other Certificates are of no use, if they are about to expired and Self Signed certificate will prohibit you to not use the Outlook Anywhere for the users. for that third party certificate is required.

Thanks
0
 
LVL 24

Accepted Solution

by:
-MAS earned 167 total points
Comment Utility
You export all the certificates. Then delete the certificate which is not in use.
You can login to OWA and check which certificate in use.
You can export the certificates
http://msexchangeguru.com/2013/06/29/import-cert-e2013/

Then keep only the required certificates.
0
 
LVL 18

Assisted Solution

by:suriyaehnop
suriyaehnop earned 166 total points
Comment Utility
On Exchange Powershell which is you did, you can pipe to Formate-List, to view which one the third party SAN certificate which still valid.

or

On Exchange server

Type run | MMC | Add Certificate Management Console | Choose local

Expend the Personal | Certificate

- It will listed the certificate installed on Exchange server
- View the Third party certficate (e.g. Digicert,GoDaddy), verify the certificate still valid or not
- Right click on that certificate |Task |Export
0
 

Author Closing Comment

by:crapshooter
Comment Utility
You were all very helpful.  Thanks for your assistance!
0
 
LVL 24

Expert Comment

by:-MAS
Comment Utility
Glad to know your it is fixed
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

Local Continuous Replication is a cost effective and quick way of backing up Exchange server data. The following article describes the steps required to configure Local Continuous Replication. Also, the article tells you how to restore from a backup…
Scam emails are a huge burden for many businesses. Spotting one is not always easy. Follow our tips to identify if an email you receive is a scam.
In this video we show how to create an Address List in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Organization >> Ad…
In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now