Solved

EXCHANGE

Posted on 2016-07-22
22
78 Views
Last Modified: 2016-07-25
my certificate on exchange 2007 is about to expire. it needs to be installed on IIS, SMTP, POP, IMAP

I need to renew the certificate and update laptops

please let me know the steps as I want to make sure , I did do long time back..
0
Comment
Question by:pramod1
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
22 Comments
 

Expert Comment

by:bunchageeks
ID: 41724737
The process would depend on a few factors.....

Is the Exchange part of an Small Business Server set up?

Is this a self issued certificate or a certificate from Certificate Authority?
0
 
LVL 5

Expert Comment

by:Eric C
ID: 41724742
Where did you buy the previous certificate from?  I've used GoDaddy in the past. What you want is a UCC certificate. Don't try to renew the certificate you have. It's better to just install the new one.  GoDaddy has a step-by-step tutorial on their website:

https://www.godaddy.com/help/exchange-server-2007-install-a-certificate-4877
0
 

Author Comment

by:pramod1
ID: 41724744
exchange 2007 enterprise edition hosting 2000 mailboxes.

when I do get-exchangecertificate | fl

I see lot of list of certificate domains issued by CA. Some says not after 9/1/2016 some says not after 12/1/2016 some says not after 12/1/2017 so how will I know which cert are installed and working?
0
PeopleSoft Has Never Been Easier

PeopleSoft Adoption Made Smooth & Simple!

On-The-Job Training Is made Intuitive & Easy With WalkMe's On-Screen Guidance Tool.  Claim Your Free WalkMe Account Now

 

Author Comment

by:pramod1
ID: 41724759
i will submit snap shot
0
 

Author Comment

by:pramod1
ID: 41724771
same certificate domain:  domain name
not after : 9/1/2016

status: valid

services: imap, pop, smtp

and again

same certificate domain:  domain name
not after 12/1/2016

status: unknown
services: imap,pop, iis

so how will I know which one is valid
0
 
LVL 5

Expert Comment

by:Jambon316
ID: 41724844
view the certificate > if it says "certificate is valid" then it is

if you have an SBS server, open the SbS  console, click on network tab > click connectivity tab > click "fix my network" > any expired/expiring soon certs will flag up and allow you to issue a self signed certificate through a simple wizard.

I think that's the only thing that sbs console is any good for.
0
 

Author Comment

by:pramod1
ID: 41724872
mine is nor sbs server. what is the meaning

certificate domain:  domain name
 not after 12/1/2016

 status: unknown
 services: imap,pop, iis
0
 

Author Comment

by:pramod1
ID: 41724883
where should I view the cert in console
0
 
LVL 5

Expert Comment

by:Eric C
ID: 41724890
Log into one of the mailboxes using exchange web access (OWA). In the browser you can click the URL icon to view the certificate. That will show you which one is being used.
0
 

Author Comment

by:pramod1
ID: 41724955
is there any way I can check I can check cert snap in
0
 
LVL 5

Expert Comment

by:Eric C
ID: 41724972
The certificate snap-in will show you all certificates.

If you have access to the Exchange Management Console you can click on 'Server Configuration' and at the bottom, look at 'Exchange Certificates'. The one in use will have a green check mark next to it.
0
 

Author Comment

by:pramod1
ID: 41725005
I don't see in exchange 2007  when I click server configuration I see all hub and client access servers
0
 
LVL 5

Expert Comment

by:Eric C
ID: 41725065
Just click on 'Server Configuration' and the info should be on the right side (not below it)

See screen shot.
emc-console-view.jpg
0
 

Author Comment

by:pramod1
ID: 41725074
I see this. attached screen shot
Capture.PNG
0
 
LVL 5

Expert Comment

by:Eric C
ID: 41725154
Don't right-click on it.  Left click and then look on the bottom right side of the screen.
0
 

Author Comment

by:pramod1
ID: 41725165
I did , it just gives server names, is it something to do with view on console
0
 
LVL 5

Expert Comment

by:Eric C
ID: 41725170
See attached screen shot, yellow highlighted area.
emc-certificate.jpg
0
 

Author Comment

by:pramod1
ID: 41725176
I see till here on console (attached)
Capture.PNG
0
 

Author Comment

by:pramod1
ID: 41725180
but when I type in EMS  get-exchangecertificate | fl I see all kinds of certifcates showing up
0
 
LVL 5

Expert Comment

by:Eric C
ID: 41725187
did you look at my screen shot, and are you able to see the same exact thing?
0
 

Author Comment

by:pramod1
ID: 41725191
yes but  I send you the screen shot what I can see on my end ( attached)
Capture.PNG
0
 
LVL 5

Accepted Solution

by:
Eric C earned 500 total points
ID: 41725194
"get-exchangecertificate | fl" will show you detailed info about each certificate.   You may have more than one, but which ones say "Status: Valid" ?
0

Featured Post

Edgartown IT Case Study

Learn about Edgartown's quest to ensure the safety and security of the entire town's employee and citizen data. Read the case study!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

How to resolve IMCEAEX NDRs in Exchange or Exchange Online related to invalid X500 addresses.
Check out this step-by-step guide for using the newly updated Experts Exchange mobile app—released on May 30.
In this video we show how to create a mailbox database in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Servers >> Data…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…

717 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question