We run exchange 2007 on Server 2008. I am trying to activate outlook anywhere. I issued two cert requests for the same name and now I can not import my certificate. When I try to import the certificate: Import-ExchangeCertificate -Path c:\my_certificate.p7b I get the following error: WARNING: An unexpected error has occurred and debug information is being generated: CertEnroll::CX509Enrollment::get_Certificate: The requested property value is empty. 0x80094004 (-2146877436) Import-ExchangeCertificate : CertEnroll::CX509Enrollment::get_Certificate: The requested property value is empty. 0x80094004 (-2146877436) At line:1 char:27 + Import-ExchangeCertificate <<<< -Path c:\gd_iis_intermediates.p7b I have installed PowerGUI and while I do not get any errors trying to manage the certificate from there I can not enable any services.(Although I think the thumbprint I see was generated when I issued the request)Now I am stuck and not sure how to:* remove the certificate requests and start over* get the certificate I have activated and move forwardI was able to install the .crt component without any issue, but I am not sure how I tie that cert to the OWA Vdirs.Any and all feedback is appreciated.Shawn

Hi,Could you tell me which certificate you applied? The third-part CA or Windows enterprise CA?If you apply the certificate from Windows CA, did you follow the suggest stepsof Microsoft ?How to create, install ,enable , export certificate ,you can find helpful information: Managing SSL for a Client Access Server http://technet.microsoft.com/en-gb/library/bb310795.aspxFrank Wang

Hi Shawn, Any updates regarding the issue? In addition, please refer to following article to enable the certificate on the Web Site: http://pro-studio.spaces.live.com/blog/cns!7CEDD8FA2A6B9050!746.entry Mike Shen TechNet Subscriber Support in forum If you have any feedback on our support, please contact tngfb@microsoft.com

Hi Shawn, Any updates regarding the issue?Thanks,Mike

Hey Mike, thanks for the feedback. The issue I am having is related to Exchange Certs in the exchange mgmt shell. I issued a couple of requests and I would like to delete those requests and issue a new request for a UCC cert. I was originally going to use a single name cert. Now however I can not seem to either apply the cert I was issued or get rid of the two cert requests that are there.

It was a Third party (Go Daddy) cert. I have tried the cmdlets and powerGUI to put the cert in or remove the requests and neither works.

Hi Shawn, Please understand that when you run New-exchangecertificate to generate certificate request, the certificate thumbprint is saved to msExchServerInternalTLSCert attribute of the server object in AD. Therefore, to remove the request, you can simply run remove-exchangecertificate <thumbprint of the Certificate> to remove the Certificate request. Regarding the error when importing Certificate by using Import-Certificate command, I think that the issue related to the Certificate from GoDaddy. From the error message, it looks like that some properties are empty.Would you please let me know the command which you ran to generate the certificate request? If possible, would you please send the request file to me at v-mishen@microsoft.com?Thanks,Mike

Mark, Thanks for the removal instructions. That is a pretty newb thing I should have gotten on my own. I assumed PowerGui would have cut through that. I do not have the original command for the request but I think I have the request output file somewhere. I will try to upload that tomorrow. Shawn

Mike, My apologies for calling you 'Mark'!! I have emailed to you the command and cert request as you requested above. Cheers, Shawn

Hi Shawn, Thanks for your response and I received the email. I have tested on my lab. After generate the Certificate from Windows CA on my lab based on the request file, I am able to import the certificate by using Import-ExchangeCertificate with no problem. I do not have a Windows 2008 lab on hand currently. I will test the request on Windows Server 2008 environment tomorrow and update the result. If the issue does not on 2008 server either, I think that the issue may relate to the Certificate generated by Godaddy according to the Certificate Request file. You may need to contact Godaddy regarding the issue. By the way, whether the original certificate request can be removed by using Remove-ExchangeCertificate command? Thanks, Mike

Yes, I was able to remove the requests using the Remove-ExchangeCertificate cmdlet. Thanks, Shawn