Solved

Migrating from Exchange 2007 to Exchange 2013

Posted on 2014-02-28
9
390 Views
Last Modified: 2014-03-10
I have successfully installed Exchange 2013.  I am trying to minimize any issues with this migration.  Can someone direct me in details on what I need to do next and how.  I just need to decommission Exchange 2007 by this weekend.   Please help me.
Thanks
0
Comment
Question by:zubby1977
9 Comments
 
LVL 12

Expert Comment

by:Md. Mojahid
ID: 39896653
0
 

Author Comment

by:zubby1977
ID: 39896814
I am unsure about Digital Certificates Configurations.  Not too sure about this.  Can someone explain this please

Submit your certificate request to be signed by your CA, then use the following command to import the certificate:
0
 
LVL 18

Expert Comment

by:Sushil Sonawane
ID: 39896841
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 

Author Comment

by:zubby1977
ID: 39897438
Do I need to export the certificates from my Exchange 2007 server.  And if I do, can you kindly explain.

Thx
0
 
LVL 11

Expert Comment

by:NetoMeter Screencasts
ID: 39897657
Zubby,

You have two options:
1. Going through the co-existence scenario which requires configuring and using a legacy namespace, and requesting and installing a new UCC (Multiple Domain Certificate) on both Exchange servers.
2. Going through the quick upgrade scenario. (not recommended, especially for the Exchange 2013 upgrade).

It seems that you are planning to choose the second option. Normally, this means that you are perfectly clear about the individual steps and the whole upgrade is pretested in a lab.

Anyway, the straight answer to your question is that if you are going with the quick upgrade scenario and you already have a valid trusted UCC on the Exchange 2007 server, you have to export it to a PFX file and import it in Exchange 2013. No need to request a new certificate.
0
 

Author Comment

by:zubby1977
ID: 39898038
It seems the the cert was issue by the Exchange 2007 Server.  Do I still need to export it to the Exchange 2013 Server.  And also I am seeing multiple certs, which one do I need to export if I need export.

Thanks
0
 
LVL 11

Accepted Solution

by:
NetoMeter Screencasts earned 500 total points
ID: 39898191
If this is the Self-Signed certificate generated during Exchange 2007 setup (or a renewed Self-Signed), you don't need to export it. You will recognize it by checking it's properties in IIS Manager. It's CN (Common Name) is Exchange 2007 short NetBIOS name, and its SAN (Subject Alternative Names) field contains only the internal Exchange 2007 short and Ative Directory FQDN:
Exchange 2007 Self-Signed Certificate Example
Again, you have a couple of options:
1. Purchase and install a trusted UCC (the recommended approach).
2. Install a trusted single name certificate. These are cheaper or free (StartSSL) but you need to modify the Exchange 2013 URL and set all of them to use the single FQDN that's included in the certificate. There is no autodiscover URL included in the certificate, so you will have to create a SRV autodiscover record in the external DNS zone which leads to a popup window presented at remote Outlook Anywhere clients.
3. Generate and install a Self-Signed multiple domain certificate/UCC with Exchange 2013 Public and autodiscover names. (not recommended for production environment or used just as a temporary replacement of the Self-Signed certificate generated by Exchange setup). You will have to create a Group Policy to set this certificate as trusted for internal clients, and install it on remote clients if they need to use Outlook Anywhere.
0
 

Author Comment

by:zubby1977
ID: 39917855
Thank you NetoMeter
0
 

Author Closing Comment

by:zubby1977
ID: 39917859
Issue resolved.  Thanks again
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

This script can help you clean up your user profile database by comparing profiles to Active Directory users in a particular OU, and removing the profiles that don't match.
Find out what you should include to make the best professional email signature for your organization.
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.

777 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question