Avatar of dejected
dejected
 asked on

Exchange 2010: Expired Certificate Still being used

hello

I am getting error id 24 in MSExchange Web Services on my Exchange 2010 SP3 server - says certificate expired. That certificate has expired but I renewed it and imported the new one and assigned all the services (except unified messaging which we don't use) to it.

Questions:
a) am OK to delete the old certificate?
b) why is it still being used for exchange Web Services (assume autodiscover and owa) when it does not have the IIS service role added to it?
ExchangeSSL / HTTPS

Avatar of undefined
Last Comment
dejected

8/22/2022 - Mon
ASKER CERTIFIED SOLUTION
Muhammad Mulla

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
SOLUTION
M A

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
dejected

ASKER
Hello OfflineGeek

No - I did it through the EMC by  clicking "Assign Services to Certificate…" under the Actions pane. Is that not a good thing?

The old certificate is displaying as having SMTP, POP and IMAP assigned but not IIS - weird.

If I remove the old one will Exchange automagically use the new one for IIS?
SOLUTION
Log in to continue reading
Log In
Sign up - Free for 7 days
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
dejected

ASKER
Thanks all. So the general feeling is just use the exchange powershell to remove the certfiicate? And nothing bad will happen...?
Muhammad Mulla

Yes, Exchange Shell is the best method of removing/enabling certificates.
Your help has saved me hundreds of hours of internet surfing.
fblack61
dejected

ASKER
Thanks again - removed using the exchange powershell as advised. Cheers!