We have created a certificate for all of our CAS's (4 of them). We have successfully imported the cert onto one server, but when we try to import it on the next CAS it tell us that the cert with that thumbprint already exists. Do we need to have separate certs for each CAS, or are we missing a step here? Thanks, RJ

With Powershell, get-exchangecertificate , and check the thumprints of what is already installed on that CAS. If its already there, and its valid, you can simply enable the services for it. If its incorrect somehow or corrupt, remove it and re-import. You only need one cert for the CAS ( I am assuming they are in an array of some sort.)

As Andy mentionned above, check the current Certificate, then enable using the following; Enable-ExchangeCertificate -Thumbprint TypeThumbPrintHere -Services POP,IMAP,SMTP,IIS. Regarding certificate, in my case I had to import the private key too. Regards EK

Hi Rj, Please follow Andy’s suggestion to check on your CAS server. If the CAS server has installed the certificate correctly, please services for it. If the certificate is incorrect, please remove it and re-import. Here are some related documents for you: Get-ExchangeCertificate http://technet.microsoft.com/en-us/library/bb124950.aspx Install an SSL Certificate on a Client Access Server http://technet.microsoft.com/en-us/library/bb310769.aspx Remove-ExchangeCertificate http://technet.microsoft.com/en-us/library/aa997569.aspx Best Regards, Evan Liu TechNet Subscriber Support in forum If you have any feedback on our support, please contact tngfb@microsoft.com Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Have a look of below article for more detail. http://exchangeserverpro.com/configure-an-ssl-certificate-for-exchange-server-2010 Export the Certificate from Exchange Server 2010: http://exchangeserverpro.com/export-an-exchange-server-2010-certificate-to-exchange-2003 Anil