Solved

Migrating from Exchange 2007 to Exchange 2013

Posted on 2014-02-28
9
392 Views
Last Modified: 2014-03-10
I have successfully installed Exchange 2013.  I am trying to minimize any issues with this migration.  Can someone direct me in details on what I need to do next and how.  I just need to decommission Exchange 2007 by this weekend.   Please help me.
Thanks
0
Comment
Question by:zubby1977
9 Comments
 
LVL 12

Expert Comment

by:Md. Mojahid
ID: 39896653
0
 

Author Comment

by:zubby1977
ID: 39896814
I am unsure about Digital Certificates Configurations.  Not too sure about this.  Can someone explain this please

Submit your certificate request to be signed by your CA, then use the following command to import the certificate:
0
 
LVL 18

Expert Comment

by:Sushil Sonawane
ID: 39896841
0
Free eBook: Backup on AWS

Everything you need to know about backup and disaster recovery with AWS, for FREE!

 

Author Comment

by:zubby1977
ID: 39897438
Do I need to export the certificates from my Exchange 2007 server.  And if I do, can you kindly explain.

Thx
0
 
LVL 11

Expert Comment

by:NetoMeter Screencasts
ID: 39897657
Zubby,

You have two options:
1. Going through the co-existence scenario which requires configuring and using a legacy namespace, and requesting and installing a new UCC (Multiple Domain Certificate) on both Exchange servers.
2. Going through the quick upgrade scenario. (not recommended, especially for the Exchange 2013 upgrade).

It seems that you are planning to choose the second option. Normally, this means that you are perfectly clear about the individual steps and the whole upgrade is pretested in a lab.

Anyway, the straight answer to your question is that if you are going with the quick upgrade scenario and you already have a valid trusted UCC on the Exchange 2007 server, you have to export it to a PFX file and import it in Exchange 2013. No need to request a new certificate.
0
 

Author Comment

by:zubby1977
ID: 39898038
It seems the the cert was issue by the Exchange 2007 Server.  Do I still need to export it to the Exchange 2013 Server.  And also I am seeing multiple certs, which one do I need to export if I need export.

Thanks
0
 
LVL 11

Accepted Solution

by:
NetoMeter Screencasts earned 500 total points
ID: 39898191
If this is the Self-Signed certificate generated during Exchange 2007 setup (or a renewed Self-Signed), you don't need to export it. You will recognize it by checking it's properties in IIS Manager. It's CN (Common Name) is Exchange 2007 short NetBIOS name, and its SAN (Subject Alternative Names) field contains only the internal Exchange 2007 short and Ative Directory FQDN:
Exchange 2007 Self-Signed Certificate Example
Again, you have a couple of options:
1. Purchase and install a trusted UCC (the recommended approach).
2. Install a trusted single name certificate. These are cheaper or free (StartSSL) but you need to modify the Exchange 2013 URL and set all of them to use the single FQDN that's included in the certificate. There is no autodiscover URL included in the certificate, so you will have to create a SRV autodiscover record in the external DNS zone which leads to a popup window presented at remote Outlook Anywhere clients.
3. Generate and install a Self-Signed multiple domain certificate/UCC with Exchange 2013 Public and autodiscover names. (not recommended for production environment or used just as a temporary replacement of the Self-Signed certificate generated by Exchange setup). You will have to create a Group Policy to set this certificate as trusted for internal clients, and install it on remote clients if they need to use Outlook Anywhere.
0
 

Author Comment

by:zubby1977
ID: 39917855
Thank you NetoMeter
0
 

Author Closing Comment

by:zubby1977
ID: 39917859
Issue resolved.  Thanks again
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
This article outlines the process to identify and resolve account lockout in an Active Directory environment.
To show how to create a transport rule in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Rules tab.:  To cr…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

679 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question