Solved

EXCHANGE

Posted on 2016-07-22
22
70 Views
Last Modified: 2016-07-25
my certificate on exchange 2007 is about to expire. it needs to be installed on IIS, SMTP, POP, IMAP

I need to renew the certificate and update laptops

please let me know the steps as I want to make sure , I did do long time back..
0
Comment
Question by:pramod1
22 Comments
 

Expert Comment

by:bunchageeks
ID: 41724737
The process would depend on a few factors.....

Is the Exchange part of an Small Business Server set up?

Is this a self issued certificate or a certificate from Certificate Authority?
0
 
LVL 5

Expert Comment

by:Eric C
ID: 41724742
Where did you buy the previous certificate from?  I've used GoDaddy in the past. What you want is a UCC certificate. Don't try to renew the certificate you have. It's better to just install the new one.  GoDaddy has a step-by-step tutorial on their website:

https://www.godaddy.com/help/exchange-server-2007-install-a-certificate-4877
0
 

Author Comment

by:pramod1
ID: 41724744
exchange 2007 enterprise edition hosting 2000 mailboxes.

when I do get-exchangecertificate | fl

I see lot of list of certificate domains issued by CA. Some says not after 9/1/2016 some says not after 12/1/2016 some says not after 12/1/2017 so how will I know which cert are installed and working?
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 

Author Comment

by:pramod1
ID: 41724759
i will submit snap shot
0
 

Author Comment

by:pramod1
ID: 41724771
same certificate domain:  domain name
not after : 9/1/2016

status: valid

services: imap, pop, smtp

and again

same certificate domain:  domain name
not after 12/1/2016

status: unknown
services: imap,pop, iis

so how will I know which one is valid
0
 
LVL 5

Expert Comment

by:Jambon316
ID: 41724844
view the certificate > if it says "certificate is valid" then it is

if you have an SBS server, open the SbS  console, click on network tab > click connectivity tab > click "fix my network" > any expired/expiring soon certs will flag up and allow you to issue a self signed certificate through a simple wizard.

I think that's the only thing that sbs console is any good for.
0
 

Author Comment

by:pramod1
ID: 41724872
mine is nor sbs server. what is the meaning

certificate domain:  domain name
 not after 12/1/2016

 status: unknown
 services: imap,pop, iis
0
 

Author Comment

by:pramod1
ID: 41724883
where should I view the cert in console
0
 
LVL 5

Expert Comment

by:Eric C
ID: 41724890
Log into one of the mailboxes using exchange web access (OWA). In the browser you can click the URL icon to view the certificate. That will show you which one is being used.
0
 

Author Comment

by:pramod1
ID: 41724955
is there any way I can check I can check cert snap in
0
 
LVL 5

Expert Comment

by:Eric C
ID: 41724972
The certificate snap-in will show you all certificates.

If you have access to the Exchange Management Console you can click on 'Server Configuration' and at the bottom, look at 'Exchange Certificates'. The one in use will have a green check mark next to it.
0
 

Author Comment

by:pramod1
ID: 41725005
I don't see in exchange 2007  when I click server configuration I see all hub and client access servers
0
 
LVL 5

Expert Comment

by:Eric C
ID: 41725065
Just click on 'Server Configuration' and the info should be on the right side (not below it)

See screen shot.
emc-console-view.jpg
0
 

Author Comment

by:pramod1
ID: 41725074
I see this. attached screen shot
Capture.PNG
0
 
LVL 5

Expert Comment

by:Eric C
ID: 41725154
Don't right-click on it.  Left click and then look on the bottom right side of the screen.
0
 

Author Comment

by:pramod1
ID: 41725165
I did , it just gives server names, is it something to do with view on console
0
 
LVL 5

Expert Comment

by:Eric C
ID: 41725170
See attached screen shot, yellow highlighted area.
emc-certificate.jpg
0
 

Author Comment

by:pramod1
ID: 41725176
I see till here on console (attached)
Capture.PNG
0
 

Author Comment

by:pramod1
ID: 41725180
but when I type in EMS  get-exchangecertificate | fl I see all kinds of certifcates showing up
0
 
LVL 5

Expert Comment

by:Eric C
ID: 41725187
did you look at my screen shot, and are you able to see the same exact thing?
0
 

Author Comment

by:pramod1
ID: 41725191
yes but  I send you the screen shot what I can see on my end ( attached)
Capture.PNG
0
 
LVL 5

Accepted Solution

by:
Eric C earned 500 total points
ID: 41725194
"get-exchangecertificate | fl" will show you detailed info about each certificate.   You may have more than one, but which ones say "Status: Valid" ?
0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Learn to move / copy / export exchange contacts to iPhone without using any software. Also see the issues in configuration of exchange with iPhone to migrate contacts.
How to resolve IMCEAEX NDRs in Exchange or Exchange Online related to invalid X500 addresses.
In this Micro Video tutorial you will learn the basics about Database Availability Groups and How to configure one using a live Exchange Server Environment. The video tutorial explains the basics of the Exchange server Database Availability grou…
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…

837 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question