?
Solved

Generate Certificate file in Exchange 2010

Posted on 2015-01-02
6
Medium Priority
?
133 Views
Last Modified: 2015-01-09
When generating Certificate file for Exchange 2010, do we need to do that for CAS server only or other servers too (such as HT , Edge, Mbox) ?
if we generate certificate for CAS server only, does it matter which CAS we select to generate certificate file?

I have see the steps in the link below, but I still need some clarifications, since they have just one server shown in the snapshot.

http://exchangeserverpro.com/configure-an-ssl-certificate-for-exchange-server-2010/

Any help will be appreciated .

Thanks
0
Comment
Question by:jskfan
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
6 Comments
 
LVL 31

Accepted Solution

by:
Gareth Gudger earned 668 total points
ID: 40528801
When generating Certificate file for Exchange 2010, do we need to do that for CAS server only or other servers too (such as HT , Edge, Mbox) ?

CAS only. If you have multiple CAS, once you process the request, you export it from one and import into others.

if we generate certificate for CAS server only, does it matter which CAS we select to generate certificate file?

Doesn't matter. As long as you complete the request on the same server. Once completed you can export and import the cert to other CAS servers.

That article is correct. Paul Cunningham is an Exchange MVP.
0
 
LVL 3

Assisted Solution

by:Sudhir Bidye
Sudhir Bidye earned 668 total points
ID: 40528870
I would recommend to run the CSR generating wizard on the Internet facing CAS server itself, as it's gonna be the first server where you will be installing the certificate.
I have faced private key missing error while exporting and importing certificate between CAS servers sometimes. Of course we can fix them easily with the command but why waste time doing it.
0
 
LVL 53

Assisted Solution

by:Will Szymkowski
Will Szymkowski earned 664 total points
ID: 40529681
You will also need to make sure that when you have installed the cert itself you will still need to proceed to add the appropriate services to the new cert in place. I would also recommend removing the old cert after you have tested the new cert and don't run into any issues.

- Open EMS
get-exchangecertificate
- You should see the current and the new Exchange Cert listed
enable-exchangecertificate -thumbprint xxxxxxxxxxxxxxx -services "pop,imap,smtp,iis"

Once you have tested this and it was successful you can remove the old certificate
remove-exchangecertificate -thumbprint xxxxxxxxxxxxxxx

Will.
0
Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 

Author Comment

by:jskfan
ID: 40530098
Sudhir Bidye
Our CAS servers do not have "Internet facing " checkbox enabled.
we have 2 CAS servers do we need to enable one of them for Internet facing ?
0
 
LVL 31

Expert Comment

by:Gareth Gudger
ID: 40530240
That is not necessary jskfan.
0
 

Author Closing Comment

by:jskfan
ID: 40541574
Thank you Guys!
0

Featured Post

NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Check out this step-by-step guide for using the newly updated Experts Exchange mobile app—released on May 30.
In the absence of a fully-fledged GPO Management product like AGPM, the script in this article will provide you with a simple way to watch the domain (or a select OU) for GPOs changes and automatically take backups when policies are added, removed o…
This Experts Exchange video Micro Tutorial shows how to tell Microsoft Office that a word is NOT spelled correctly. Microsoft Office has a built-in, main dictionary that is shared by Office apps, including Excel, Outlook, PowerPoint, and Word. When …
how to add IIS SMTP to handle application/Scanner relays into office 365.
Suggested Courses
Course of the Month8 days, 14 hours left to enroll

764 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question