We are in the process of migrating from Exch 2003 to Exch2010. I aquired and installed my ssl certificates. In the gui in Exch 2010 when I went thru the process to "Assign services to certificate" I assigned more services than I needed. So I went back and reconfigured by unchecking the services that I didn't need. However, it doesn't remove the services! Why is it not removing the service when I uncheck the box?? It is driving me nuts! Can anyone help me with this? thanks

Run the same command with the same cert. thumbprint but with the services that you need. It will over write the last settings.Raj

I didn't use PS. I used the gui. If you have an example of a PS command that will assign the services please provide it. thanks

Run these commands. The first command is to get the certifciate thumbprint and the second is for assinging thr cert. to exch. services. 1. Get-ExchangeCertificate 2. Enable-ExchangeCertificate -thumbprint <certificate-thumbprint> -services "IIS,POP,IMAP"Raj

Run these commands. The first command is to get the certifciate thumbprint and the second is for assinging thr cert. to exch. services. 1. Get-ExchangeCertificate 2. Enable-ExchangeCertificate -thumbprint <certificate-thumbprint> -services "IIS,POP,IMAP"Raj

thanks. I will try this.

I entered the following and it took the command and gave no errors but the certificate assignment is still showing imap, iis, & smtp. It doesn't appear to have been any more effective than trying to use the gui. Enable-ExchangeCertificate -thumbprint 99325A46D06BC7216DDFE7E4EECDBB4E8C714C4E -services "iis" Any more suggestions? thanks

bump

Why are you trying to remove a cert and for what service? Is it causing an issues?The Enable-ExchangeCertificate cmdlet is additive. When you specify a subset of services for which a certificate is enabled, the services that aren't specified aren't removed from the Services property. If you don't want to use an existing enabled certificate for Exchange services, you must enable another certificate, and then remove the certificate you don't want to use. Sukh

I do not want to remove the certificate. I just want to remove some services from it. I only want IIS assigned but it also has IMAP and SMTP. This isn't creating a problem so I can leave it as is but I would prefer to remove the IMAP and SMTP service entries. It won't let me remove them in the gui.