exchange 2007 expired certificate renewal


i'm sure this has been asked 15 thousand times but i like asking my own questions when needed

i'm very used to exchange 2010, but tonight i have a person who has exchange 2007 and their godaddy ssl certificate expired 4 days ago

i can't find any way in EMC to renew this certificate, so i assume it has to be done in EMS

can someone give me decent steps to get this done?  the client has purchased the ssl renewal in godaddy, just not sure how to extend it in exchange 2007, or if it matters that it already expired

thanks in advance

note:  google searches seem to yield info for renewing self-signed certs, or installing brand new trusted certs, not specifically renewing one

exchange 2007 on sbs 2007
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

FocISAuthor Commented:
Thanks, that deals with generating a CSR and creating a new certificate - is this the process for renewing an existing/expired certificate?
suriyaehnopCommented: renew existing/expired certificate.
Determine the Perfect Price for Your IT Services

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden with our free interactive tool and use it to determine the right price for your IT services. Download your free eBook now!

MASEE Solution Guide - Technical Dept HeadCommented:
You can use this for the CSR command generation
Simon Butler (Sembee)ConsultantCommented:
Wait - you have mentioned SBS 2008.
Things are a little different with SBS 2008.

If they are using a single name SSL certificate, then use the wizard in the SBS console to generate the request. You only need to use the shell to generate the request if it is a UC type certificate.
Furthermore, don't forget that you cannot include any internal names on the certificate, so only public names -, etc.

Once you have got the certificate response, install the new GoDaddy intermediate certificates, then complete the request in the SBS console or EMC, depending on where you created it.
Then ENABLE the certificate through the SBS console, not through Exchange.


Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
FocISAuthor Commented:
Simon - that's exactly what i was missing

let me follow up with this question though, i generated one thru EMC based on the above links and have copied that, but not pasted it into godaddy yet... can i abandon that and use the wizard to be sure?

it is one single name, not ucc or wildcard, and is a publicly routable name not internal
Simon Butler (Sembee)ConsultantCommented:
If you already have the request in EMS, then you can use that. Just remember to complete the request through EMC, then enable it. It makes no difference - the key bit is using the wizard to enable the certificate (so selecting "use an existing certificate).

FocISAuthor Commented:
exactly what i was looking for, i forgot about the sbs wizard
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.