I am in an ex2007 (win2003) & ex2013 (win2012) coexistence situation.

When I installed the ex2013 server, I purchased a new SAN cert, which I applied to both the 2007 & 2013 servers.  The 2007 server had an existing SAN cert, which I did not remove.

The 2013 server sees the new cert as Status: Valid, but the 2007 shows it as Invalid.

Also, in the certificates MMC on the ex2007 server, the new cert has the error:

                 This certificate has an nonvalid digital signature

This same cert works fine on the new ex2013 server. 

The old cert expires tomorrowwhats going to happen to users trying to connect to mailboxes still on the 2007 server?

 Thanks!

Hello!

Maybe you going to have problems with the authentication of the users on Ex07, you need renew the certificate, you can create another certificarte to the old exchange or migrate the users to the Ex13.

Regards

Here's what I would do:

1. Export the certificate from the Exchange 2013, make sure you include the private key (pretty sure its default).
2. Remove the Cert you just imported from the certificate store on the Exchange 2007 server
3. Import pfx file from Exchange 2013 Server
4. Assign proper services to the new cert
5. iisreset on the Exchange 2007 Servers

I would probably do this off hours, since users are going to see a blip in connectivity if they are using OutlookAnywhere on the 2007 Side of things.

when i tried to remove the cert i got an error about the transport service stopping and a new cert being created

My problem turned out to be that the Win2003 Exch2007 server did not understand the new SHA2 certificate.

I installed hf262679 on the Win2003 server, rebooted and the new cert was fine.

Thanks for the replies

• Marked as answer by meetoo2 17 hours 46 minutes ago