Installing 3rd party Certificate to replace internal CA
Hi, My Exchange server is also my own CA server as we are using internal CA when we roll out the Exchange Server last year. Now we have purchased a 3rd party cert GeoTrust. I have some question 1. Do I need to use the EMS to generate and submit the request like what i did for the first time? 2. Do I just follow instructions from GeoTrust to to generate the cert .p7b format and Complete the Cert Request in my IIS and bind it to the Default Web Site? 3. Once the steps is complete, do I need to issue a new Security Certificate to my remote users to replace their current one OR they still can use it back? If I do this during office hour, will it affect the current remote users who is using OUtlook Anywhere? Thanks in advanced.
January 11th, 2011 1:27am

Hi, If you are holding EX2010, you may get some tips from this post: http://windowsadmin.info/viewtopic.php?f=20&t=180Regards from www.windowsadmin.info
Free Windows Admin Tool Kit Click here and download it now
January 11th, 2011 3:15am

Im using Exchange Server 2007
January 11th, 2011 3:58am

1. If you have bought the cert then you just need to install it on exchange box and assign all required services to the new certificate. Use the Shell to import a certificate You need to be assigned permissions before you can perform this procedure. Command: Import-ExchangeCertificate -path <certificate_file_name>.cer -friendlyname "Contoso CAS01" Use the Shell to assign the certificate to IIS, POP3, and IMAP4. Command: Enable-ExchangeCertificate -thumbprint <certificate-thumbprint> -services "IIS,POP,IMAP,SMTP" Assign the certificate to a server, which in turn assigns the certificate to all services that are running on the Exchange server. Import-ExchangeCertificate -path <certificate file name> -friendlyname "Contoso CAS01" | enable-exchangecertificate -services "IIS,POP,IMAP,SMTP" 2. Yes you have to Bind the new public certificate to Default web Site. 3. Public certificates are trusted by default by all clients, so ideally you need not assign the cert to all remote clients. i will suggest to do this after office hours, however the whole process will not take more than 30 mins of so. Best Rgds, Ashish | Unified Comunication | MCTS | MCITP | Please remember to select option "Propose As Answer" if solution work for you | My posts hold no assurances, no promises, and they measured no rights.
Free Windows Admin Tool Kit Click here and download it now
January 12th, 2011 1:38am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics