OWA Certificat about to expire
No I do not get any event ID # 12018 or 12017. I check the Hubcas and edge.. :-S
September 15th, 2010 9:29pm
Hello,
I use Exchange 2007 and my webmail certificate is about to expire. Would you know any procedure that would describe all the necessary steps to change that certificate without service interruption and/or things that I would not have thought about.
I have 2 Edges, hubcas, ISA and mailbox. I wonder if the change occur only on both Hubcas from IIS..?
I would appreciate some clarification (never done it before)
Thanks,
Graig
Free Windows Admin Tool Kit Click here and download it now
September 16th, 2010 4:06am
Hi,
First you have to request a new cert from any third party & then follow these articles : http://technet.microsoft.com/en-us/library/bb851505(EXCHG.80).aspx
http://www.exchangeinbox.com/article.aspx?i=114
http://blog.sembee.co.uk/post/Exchange-2007-and-SSL-Certificates-Take-2.aspx
http://www.digicert.com/ssl-certificate-installation-microsoft-unified-communications.htm
http://exchangepedia.com/2008/01/exchange-server-2007-renewing-the-self-signed-certificate.html
Have a look into this post it might help :
http://social.technet.microsoft.com/Forums/en-US/exchangesvradmin/thread/3d9d74c6-b613-4310-82cc-6962cd0c7b68
Ripu Daman Mina | MCSE 2003 & MCSA Messaging
September 16th, 2010 4:11am
I am very confused..
I did a get-Exchangecertificate | fl and got:
[PS] C:\Documents and Settings\Admin-gch>Get-ExchangeCertificate | fl
AccessRules : {System.Security.AccessControl.CryptoKeyAccessRule, System.Security.AccessControl.CryptoKeyAccessRule, Syste
m.Security.AccessControl.CryptoKeyAccessRule}
NotAfter : 19/03/2011 09:52:14
NotBefore : 19/03/2010 09:52:14
AccessRules : {System.Security.AccessControl.CryptoKeyAccessRule, System.Security.AccessControl.CryptoKeyAccessRule, Syste
m.Security.AccessControl.CryptoKeyAccessRule}
NotAfter : 14/01/2011 21:50:40
NotBefore : 14/01/2010 21:50:40
AccessRules : {System.Security.AccessControl.CryptoKeyAccessRule, System.Security.AccessControl.CryptoKeyAccessRule, Syste
m.Security.AccessControl.CryptoKeyAccessRule}
NotAfter : 16/01/2011 19:30:07
NotBefore : 14/01/2010 03:19:26
I do not see any certificate about to expire. However, it is about to expire on my ISS (Certificate about the https for OWA)
I had a look at the documentation and would like to be sure that I would need to do a New-ExchangeCertificate.. etc..?
Free Windows Admin Tool Kit Click here and download it now
September 16th, 2010 4:46am
Hi,
Try : Get-ExchangeCertificate | List & see which cert is for what, it will give you output as mentioned in this article : http://www.exchangeinbox.com/article.aspx?i=114Ripu Daman Mina | MCSE 2003 & MCSA Messaging
September 16th, 2010 4:56am
I got exactly the same "Not After" field and I don't see any expiring dates..
Free Windows Admin Tool Kit Click here and download it now
September 16th, 2010 5:05am
Hi,
"Not After" is the expiry date. Don't u got any tab which says : services, in case ur certificate is expiring u will get event ID: 12018 & 12017 in event viewer.Ripu Daman Mina | MCSE 2003 & MCSA Messaging
September 16th, 2010 5:24am
Hi,
What make to think that you certificate is expiring, for more info have a look into this article : http://technet.microsoft.com/en-us/library/bb851505(EXCHG.80).aspx
http://technet.microsoft.com/en-us/library/bb851554(EXCHG.80).aspx
This post : http://social.technet.microsoft.com/Forums/en-US/exchangesvrdeploy/thread/5a5d751c-0b9e-4141-a7b7-1352fb54e9c5Ripu Daman Mina | MCSE 2003 & MCSA Messaging
Free Windows Admin Tool Kit Click here and download it now
September 16th, 2010 5:49am
Hi,
Do you get any error/warning when accessing your OWA?
Please follow these steps to check if whether your current IIS certificate is expired or not:
1. Open IIS, right click Default web site and choose properties.
2. In Directory Security tab, under "Secure communications", click View Certificate. See the 'Vaild From' date.
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. Thanks
Gen Lin-MSFT
September 17th, 2010 5:44am