Link to home
Start Free TrialLog in
Avatar of nick Bradley
nick Bradley

asked on

Exchange 2013 - installed new cert but OWA still using old cert

Nice easy one for you.

I renewed the UCC cert and assigned IIS, SMTP, POP and IMAP.  However, OWA still seems to be using the old cert.  So I removed the old cert and did an IISRESET - OWA still using the old cert. (How can it use the old cert if I removed it???)

Checked the certs in IIS and the old one is not listed. The bindings in IIS are using the new cert.  Used exchange PowerShell to assign the services too. Also listed the exchange certs using get-exchangecertificate | fl   and the old one does not appear.

As a final resort, I rebooted the server but the problem still exists.

What is going on?
Avatar of Tom Cieslik
Tom Cieslik
Flag of United States of America image

Hi Nick.
Is it happening on more than one computer or only on one ?
Did you try install certificate on your workstation and place it in Root Authority then restart browser and check what certificate will appear in OWA ?
Hey Tom. Thanks for the prompt reply.

I don't have access to stations at the minute as the office is closed for holidays. I installed the cert and tested by accessing OWA in my laptop (not joined to the domain)
If you want, you can provide me address of your OWA on priv message and I'll test it from my end
It's showing up OLD certificate in OWA and ECP link.
It looks like new one was not applied completely.
If you don't have access to ECP you will not be able to provide screenshot from your certificates installed on server.
Are your server accepting login with expired certificate through ECP ?
Avatar of nick Bradley
nick Bradley

ASKER

I can access ECP fine.
User generated image
Can you high lite UCC cert and show what it say on right site ?>
I believe this is the one you're taking about.
ASKER CERTIFIED SOLUTION
Avatar of Tom Cieslik
Tom Cieslik
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Please following article to remove old certificates just make sure old cert is not assigned to any services as given on following article

http://exchangeserverpro.com/exchange-2013-assign-ssl-certificate-to-services/
Have you restarted IIS service after removing certificate to make the new certificate changes effective?
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
It pays to speak to the engineer who set the rig up before digging in the wrong direction.