A couple of our Exchange Server certificates are due to expire soon, both are SMTP, one is issued by the exchange server, one by the Domain, can I simply run this power-shell command once to create new ones for both?

new-exchangecertificate

Thanks

PS - it's been a while since I preformed this process and even then it wasn't straight forward

Hi,

It is advisable to go through the following kb for renewing the certificate

https://technet.microsoft.com/en-us/library/ee332322%28v=exchg.141%29.aspx?f=255&MSPPError=-2147217396

Hi,

According to your description, I understand one of your expired certificate is the self-signed certificate, I am not quite sure your second certificate which is issued by domain is self-signed certificate or other type.

So you can run the following command to check your certificate settings on Exchange server:

Get-ExchangeCertificate | fl

You can use the below command to renew the self-signed certificate:

Get- ExchangeCertificate -Thumbprint 'XXXXXXXXXXXXXXXXXXXXXX' | New-ExchangeCertificate

Best Regards,

David 

Thanks for the responses but I don't just want to press a button or run a command without understanding the process first.

Here's a screenshot of the certificates I'm referring to:-

I'd like to know the best way to renew these (should I renew or create a new one, as per the command In my first post), whether they can be renewed early (will it create additional ones that will supercede the expiring ones).

Thanks