Invalid cert?

I'm trying to assign a certificate in Exchange 2007 and I'm getting this error message. "Certificate was found but is not valid for use with Exchange Server (reason: PrivateKeyNotAccessible) Any suggestions as to what I need

June 27th, 2013 8:27pm
You have to make sure that you installed/imported certificate together with private key on your Exchange server. Most likely, you imported certificate on Exchange server, but without private key. It is easiest to recreate certificate request and issue certificate again.
Free Windows Admin Tool Kit Click here and download it now
June 27th, 2013 9:16pm
Yeah, I was only given the p7b cert, I've requested a new cert.
June 27th, 2013 9:17pm
Did you create the certificate request from the Exchange server. If so, you need to complete the request by importing the .p7b cert on the same server, so that it binds with the private key.
Free Windows Admin Tool Kit Click here and download it now
June 28th, 2013 3:57pm
I created the CSR from the same Exchange server that I tried to import it on.
June 28th, 2013 4:24pm

Hello,

Here is the article for your reference.

Creating a new SSL certificate in Exchange 2007 CAS

http://blog.meigh.eu/2010/01/27/creating-a-new-ssl-certificate-in-exchange-2007-cas.aspx

Free Windows Admin Tool Kit Click here and download it now
June 29th, 2013 4:35am
I created another CSR and had them purchase another cert and it still failed. I tested the certificate with the digicert utility and the certificate passed the private key test.
July 5th, 2013 8:38am

Hi Baron,

I pointed to the DigiCert util and why was another post marked as answer? ;-)

Free Windows Admin Tool Kit Click here and download it now
July 9th, 2013 10:45am

In my case the error had to do with the CRL not being accessible from the exchange server. (didn't get the privatekey error however, so it's possibly not the same issue.)

http://exchangerz.blogspot.be/2012/06/certificate-is-invalid-for-exchange.html

But you can always give it a try :-)

July 11th, 2013 10:46am
Third time's the charm apparently. Since I wasn't purchasing the cert and only generating the CSR I don't know if the middleman did anything different this time but after generating the cert from the EMS instead of using the Digicert tool it worked.
Free Windows Admin Tool Kit Click here and download it now
July 12th, 2013 12:46pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics