asked on

help! Wildcard cert installation exchange 2007

I had an apache server (smoothwall box) which we needed to install a wildcard cert onto.

I made a CSR for godaddy wildcard, and it was verified and Godaddy sent me a download link.

It had certificates for Apache, IIS, Exchange, other etc, so I downloaded the Apache cert which an engineer installed, and I also downloaded an Exchange certificate set.

Cool. So i extracted the zip file and imported the godaddy intermediate Cert (.p7b) using local machine MMC

I have then installed the SSL cert using powershell "Import-ExchangeCertificate -Path C:\CertificateFile.cer" which it installed

I then tried to enable it and I got an error about
"Enable-ExchangeCertificate -Thumbprint FA9AD29284E4B27
68FF7DBD977319094688Cxxxx -Services "SMTP, IIS, IMAP, POP3"
Enable-ExchangeCertificate : Cannot bind parameter 'Services'. Cannot convert value "SMTP, IIS, IMA
P, POP3" to type "Microsoft.Exchange.Management.SystemConfigurationTasks.AllowedServices" due to in
valid enumeration values. Specify one of the following enumeration values and try again. The possib
le enumeration values are "None, IMAP, POP, UM, IIS, SMTP".
At line:1 char:90
+ Enable-ExchangeCertificate -Thumbprint FA9AD29284E4B2768FF7DBD977319094688Cxxxx -Services <<<< "
SMTP, IIS, IMAP, POP3"
+ CategoryInfo : InvalidArgument: (:) [Enable-ExchangeCertificate], ParameterBindingE
xception
+ FullyQualifiedErrorId : CannotConvertArgumentNoMessage,Microsoft.Exchange.Management.SystemC
onfigurationTasks.EnableExchangeCertificate

I have tried to remove it and get:
Remove-ExchangeCertificate -thumbprint FA9AD29284E4B27
68FF7DBD977319094688Cxxxx
Remove-ExchangeCertificate : The certificate with thumbprint FA9AD29284E4B2768FF7DBD977319094688C5xxxx was found but is not valid for use with Exchange Server (reason: PrivateKeyMissing).
At line:1 char:27
+ Remove-ExchangeCertificate <<<< -thumbprint FA9AD29284E4B2768FF7DBD977319094688Cxxxx
+ CategoryInfo : NotSpecified: (:) [Remove-ExchangeCertificate], CertificateNotValidF
orExchangeException
+ FullyQualifiedErrorId : 3C9FB55C,Microsoft.Exchange.Management.SystemConfigurationTasks.Remo
veExchangeCertificate

Deleted via MMC and tried again, but hitting head against the wall.

I just want to install the wildcard cert from the downlaods that godaddy provided. Can anyone advise please... quickly???

much appreciated

ASKER CERTIFIED SOLUTION

David Johnson, CD

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

leegclystvale

ASKER

Thanks David. I'd tried the sslshopper stuff already but kept getting the Self signed cert from the device. Turns out it was a bit of a pain and the installers had to mess about with the wildcard cert and bundle it to a PFX format. I could then enable it successfully in Exchange

Thanks for the help and the solution would have worked under normal circumstances no doubt!