A driect trust certificate will expire soon.
Hello!
I am receving a bunch of these types of messages:
Event Type:WarningEvent Source:MSExchangeTransportEvent Category:TransportService Event ID:12017Date:4/1/2008Time:9:05:59 AMUser:N/AComputer:EXCHANGE02Description:A direct trust certificate will expire soon. Thumbprint:CAD1CE9D1C8552993EC152D6FD40F66A0DD3434B, hours remaining: 284
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Our Exchange environment is one Exchange 2007 Server and one Exchange 2003 server (soon to be retired).
Could someone please explain to me what this message means in simple terms?
It seems all I need to do is:
User Action
To resolve this warning, you must use the New-ExchangeCertificate cmdlet to create a new internal transport certificate (also referred to as direct trust certificate) on the computer that returned this Warning event. Running the New-ExchangeCertificate cmdlet with no arguments creates an SMTP-enabled certificate for direct trust. For more information, see New-ExchangeCertificate.
Is this safe? What is this doing? Do I need any arguments?
Does anything need to be done on the 2003 server?
Thank you very much for your help!!
-Jason
April 1st, 2008 5:15pm
Hello,
Not sure if you found the answer to this, however I'd like to know!!
Free Windows Admin Tool Kit Click here and download it now
September 14th, 2010 7:10pm
Hello,
Not sure if you found the answer to this, however I'd like to know!!
The certificate mentioned is about to expire.
If you run get-exchangecertificate |fl then you will see the certificates that are on the server.
If you have a commercial certificate then it could be that one of the self signed ones need to be removed, or it could be that the commercial SSL certificate itself is about to expire. The thumbprint points to the certificate that generating the error.
Simon.Simon Butler, Exchange MVP. http://blog.sembee.co.uk , http://exbpa.com/
September 14th, 2010 7:47pm
Hi
If it's the self-signed cert that will get's expired check this link below
http://exchangepedia.com/2008/01/exchange-server-2007-renewing-the-self-signed-certificate.html
Jonas Andersson MCTS: Microsoft Exchange Server 2007/2010 | MCITP: EMA 2007/2010 | MCSE/MCSA Blog:
http://www.testlabs.se/blog
Free Windows Admin Tool Kit Click here and download it now
September 15th, 2010 12:31pm