Hi, I have TMG 2010 & Exchange 2007 within my environment. OWA published via TMG. Certificate is expired after 2 years. But for now when I renew certificate like following link. http://trycatch.be/blogs/pdtit/archive/2009/04/26/how-to-renew-your-exchange-2007-ssl-certificate-specifically-when-using-isa-2006-as-publishing-server.aspXx Certificate renewed but certificate issuer changed to exchange itself instead of Internal Certificater Authority. Then when I tried to use the certificate for TMG then all tests showing failed and authentication failed. Kindly suggest. Dider

Hello, Is it an self-singed certificate? 1. Generate the Exchange certificate request in any Exchange server via Exchange Management Shell, 2. Install the Windows CA service on a individual Windows server or domain controller, 3. Submit a certificate via internal CA 4. Import the certificate into Exchange server Import-ExchangeCertificate -path <certificate_file_name>.cer 5. Note down the value of thumbprint 6. Enable certificate on both CA servers, Enable-ExchangeCertificate -thumbprint <certificate-thumbprint> -services "IIS " Thanks, Simon Wu TechNet Community Support

Hi Simon, Thanks for your reply. But as this is new certificate generation. Will it cause any issue for my existing services as old certiface has diffenent thumbprint! Also kindly share the cmdlet for certificate request. Rgds, Dider

Hello, New certificate command can be various which depends on different requirements. Id like to share the following article with you. http://blogs.technet.com/b/exchange/archive/2007/07/02/3403301.aspx Thanks,Simon Wu TechNet Community Support