Hi,
in my network I have Exchange 2007 and Outlook 2010/2013.

I need to replace the existing internal enterprise root Certification Authority with a new one.

Some people use the encryption email with certificates issued by current CA.

When will I replace the CA and install the new user certificate issued by the new root CA, what will happen to old encrypted emails ?
I need users to be able to read the old encrypted email.

Thanks
Andrea

Hi Andrea:

where do you want to apply this change? 

For Email encryption, if public key of the old certificate is still available, user will be able to read the mail. Otherwise, no.

• Edited by Chloe WangModerator 11 minutes ago

Hi Andrea:

where do you want to apply this change? 

For Email encryption, if public key of the old certificate is still available, user will be able to read the mail. Otherwise, no.

• Edited by Chloe WangMicrosoft employee, Moderator Wednesday, April 01, 2015 7:15 AM
• Proposed as answer by Chloe WangMicrosoft employee, Moderator Thursday, April 09, 2015 1:34 PM
• Marked as answer by Chloe WangMicrosoft employee, Moderator Monday, April 13, 2015 4:43 AM

thanks
Andrea