troubleshooting Question

Exchange certificate error/setup

Avatar of Lofty Worm
Lofty WormFlag for United States of America asked on
ExchangeWindows Server 2012Microsoft IIS Web Server
13 Comments1 Solution255 ViewsLast Modified:
OK, I am pretty new to exchange, and I hate certificates.  Not a total newb but don't skip the obvious please.  Additionally, I am picking up this system from old admins that left on bad terms.

The core problem is this.  On setting up a new user on a new computer, I receive a certificate error.  I can skip it and it will run through, but my users freak out, and I do not want to teach them to ignore these warnings, so I need to get it fixed.

The Error is
Cert Error
The certificate is
From this, it appears that the is using a self signed cert, and is also SHA1.

The environment is like this
The Root CA does not have a website I can download the root cert from (broken?)
The Sub CA does and appears to be working

There are a bunch of certificates on all 3 exchange mail servers, most all are self signed I THINK  

Only listing the certs in the exchange MMC IIS console;
There ones listed in the web admin page are similar, only excluding the one that is expired.

There are so many, few to none match.  No rhyme or reason.  

I THINK I need to add a good cert from the Sub CA, and then remove the bad certs.  But this is a production box, and I am worried about removing certs that haven't expired, bad past experiences.

I guess I am asking for some guidance in cleaning up this mess.
Lofty Worm
IT Manager

Our community of experts have been thoroughly vetted for their expertise and industry experience.

Join our community to see this answer!
Unlock 1 Answer and 13 Comments.
Start Free Trial
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 13 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros