Renewing SSL Certificates on Exchange Server 2007
Guys , need to know about the Renewing SSL Certificates on Exchange Server 2007, as we have two CAS/HUB server ( Server1 & Server2) , so my doubt is when i have renewing the certificate on
Server 1 then i do the same on server 2 as well or on one server (Renewing SSL Certificates on Exchange Server 2007) will be fine. As i am following the below steps for the renewal. If anybody knows any other way please
let me know as well. Thanks.
Create a certificate
Send it to 3rd part root CA
Once you will get the the new certificate save to C drive
Remove the existing expired certificate
Import the certificate what we received
Enable the certificate what we received.
November 3rd, 2011 2:58am
Need to know ... necessary to install the certificate on both the servers ( CASHUB1 and CASHUB2) or on only one of the server it's fine ....
Free Windows Admin Tool Kit Click here and download it now
November 3rd, 2011 2:19pm
If both servers are accepting traffic from the internet then both servers should have the certificate installed.
Both servers should also be listed in the SSL certificate, so that one certificate covers both servers.
You only do the certificate request and response on one server. Once complete simply export and import the certificate on to the second server and enable it.
The process is identical to the first certificate, I have the full steps here:
http://exchange.sembee.info/2007/install/multiplenamessl.asp
Simon.Simon Butler, Exchange MVP
Blog |
Exchange Resources | In the UK?
Hire Me.
November 3rd, 2011 8:19pm
Thanks Simon for your reply, i got your point as per you decent article but from the safer side i am just telling you the steps what i am going to perform you just please let me know if that is the correct way.
One Server 1.
1. Once will get the the new certificate
2. Remove the existing expired certificate
3. Import the certificate what we received
4. Enable the certificate what we received.
Now One Server 2 ( Will repeat the same steps) - correct ?
Apart from this we need to import the certificates on the ISA server as well ! There also we need to import on both the server s CORRECT ? or only on one server, both the server are open for the connections ....
Free Windows Admin Tool Kit Click here and download it now
November 7th, 2011 10:57am
I can't answer questions about ISA, as I don't use that product.
My article covers all of the steps. I wouldn't remove the old certificate until you have the new one in place though.
Simon.Simon Butler, Exchange MVP
Blog |
Exchange Resources | In the UK?
Hire Me.
November 7th, 2011 1:07pm
Thanks for your reply Simon.. i found the very good below links for the same as well. Thanks again for your time and help.
http://social.technet.microsoft.com/Forums/en-US/exchangesvrgeneral/thread/20adfb3d-2fa6-4ff9-b785-cb47a772ed58
https://exchangegoodies.wordpress.com/tag/renew-certificate/
Now One Server 2 please find the below URL
http://www.msexchange.org/articles_tutorials/exchange-server-2007/high-availability-recovery/load-balancing-exchange-2007-client-access-servers-windows-network-technology-part3.html
Free Windows Admin Tool Kit Click here and download it now
November 8th, 2011 10:26am