Certificate Question
I am getting a certificate warning. Our 3rd party certificate expires in a month. Is this the same certificate as the 3rd party certificate or a different certificate? If it's different - How do I get this fixed? Event Type: Warning Event Source: MSExchangeTransport Event Category: TransportService Event ID: 12018 Date: 9/24/2010 Time: 12:47:52 PM User: N/A Computer: XXXX Description: The STARTTLS certificate will expire soon: subject: XXXX.XXXX.net, hours remaining: FFA7EECE28EB07237760786BFB3472A770083586. Run the New-ExchangeCertificate cmdlet to create a new certificate. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.NC Beach Bum
September 24th, 2010 12:58pm

New-ExchangeCertificate will generate a new self-signed certificate that is applied to SMTP. Simply run that command and say yes to replace. You can verify which cert its using with get-ExchangeCertificate and compare the thumbprint: FFA7EECE28EB07237760786BFB3472A77008358
Free Windows Admin Tool Kit Click here and download it now
September 24th, 2010 1:01pm

Thanks very much! NC Beach Bum
September 24th, 2010 1:29pm

Andy - Could this issue have something to do with my SMTP / POP users not being able to send / receive in Outlook? When I run the command get-exchangecertificate what I see are 4 certificates. Two of the certificates look to be for the same thing. Then I have two other certificates for with cn=mail.xxxxx.xxx and one for CN=www.owa.xxxxx.xxx 64FBB3445FC9780A06E428907DF7511FE5EC4153 IP..S CN=WXYZ FFA7EECE28EB07237760786BFB3472A770083586 IP..S CN=WXYZ Could my send and receive error be caused by still showing the 64FBB3445FC9780A06E428907DF7511FE5EC4153 certificate entry? If so, how do I remove it? NC Beach Bum
Free Windows Admin Tool Kit Click here and download it now
September 24th, 2010 2:59pm

Did you verify what certificate is being used with SMTP? The self-signed or 3rd party? If you ran that command above and replaced the cert with the self-signed cert, and you need SMTP to be associated with the 3rd party cert, then use enable-exchangecertificate and associate the 3rd party cert with the SMTP instead.
September 24th, 2010 3:05pm

Do a get-ExchangeCertificate | fl Then carefully look at each cert returned. Which ones are enabled for SMTP and are also valid? When did these errors start and what exactly are they?
Free Windows Admin Tool Kit Click here and download it now
September 24th, 2010 4:31pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics