asked on

Removing self-signed Exchange 2007 Certificate

Hi.
We have an SSL cert that we renew every year.
We also have a self-signed certificate.
When I tried to enable the new SSL certificate I received the following warning:
"WARNING: This certificate will not be used for external TLS connections with an FQDN of 'mail.MyDomain.com' because the self-signed certificate with thumbprint 'D571C4AE9E2127xxxxxxx9C8805E8993612C5130' takes precedence. The following connectors match that FQDN: Client MAILSERVER."
I was thinking that maybe I can remove the self-signed certificate before proceeding but I'm a little worried about the repercussions.
I'd like to know what some experts think.

ASKER CERTIFIED SOLUTION

M A

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

homerslmpson

ASKER

Okay then.

Do you know how I can get rid of the warning message mentioned above about TLS?

M A

You can ignore this warning.
MAILSERVER will use internal self signed certificate for inter server communication.

Thanks

homerslmpson

ASKER

What if I want to use TLS?

MXToolbox shows that we do not support TLS.

Hypercat (Deb)

You have to enable/require TLS in the properties of the Exchange Send connector if you want to use it. You can use "opportunistic" TLS by setting the connector to use TLS but not require it, or set the connector to require TLS for all communications. IIRC, opportunistic TLS is the default for Exchange 2007, which means that TLS will only be used if the receiving server requires it.

M A

Agree with hypercat

Todd Nelson

I am sure you are already aware but if Exchange 2007 is installed on Windows 2003 it will not be supported by Microsoft even though Exchange 2007 with SP3 is still supported.

SOLUTION

homerslmpson

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial