Upgrade Exchange 2k7 to 2k10 SSL certificate question
I have an existing Exchange 2007 infrastructure with 2 2k7 servers in one organization. Each one has a current SSL cert for OWA. I am planning my upgrade process to 2010 and would like to know if the existing SSL certificate will migrate and
apply to the new exchange installation? I am planning on upgrading in place on the same boxes that i have 2k7 installed on. Thanks.
January 31st, 2011 1:01pm
Hi,
Please go-through the following link, I have followed the same steps it worked for me..
Clink on 4th step "Add digital certificates on the Client Access server" on the process, it gives you the step by step procedure.
http://technet.microsoft.com/en-us/exdeploy2010/default.aspx#DeploymentCheckList/ee958302/2007
Please let me know if you need any help...Ravi | MCSE Messaging - 2003. This posting is provided "AS IS" with no warranties, and confers no rights.
Free Windows Admin Tool Kit Click here and download it now
January 31st, 2011 2:26pm
I have an existing Exchange 2007 infrastructure with 2 2k7 servers in one organization. Each one has a current SSL cert for OWA. I am planning my upgrade process to 2010 and would like to know if the existing SSL certificate will migrate
and apply to the new exchange installation? I am planning on upgrading in place on the same boxes that i have 2k7 installed on. Thanks.
Hello
Which certificate do you have currently in your exchange server ?
In Exchange 2010 server you may require a certificate that can represent multiple domain names
SAN (Subject Alternate Name) , however, you can utilize a
wildcard certificate also.
Thanks Mhussain
January 31st, 2011 5:01pm
I have an existing Exchange 2007 infrastructure with 2 2k7 servers in one organization. Each one has a current SSL cert for OWA. I am planning my upgrade process to 2010 and would like to know if the existing SSL certificate will migrate
and apply to the new exchange installation? I am planning on upgrading in place on the same boxes that i have 2k7 installed on. Thanks.
Hello
Which certificate do you have currently in your exchange server ?
In Exchange 2010 server you may require a certificate that can represent multiple domain names
SAN (Subject Alternate Name) , however, you can utilize a
wildcard certificate also.
Thanks Mhussain
Free Windows Admin Tool Kit Click here and download it now
February 1st, 2011 12:59am
The issue with the current certificate may well be the additional names - they may have the names of the servers involved.
Furthermore, if you are going to have a co-existence period then you will need to have two different URLs - one for each version of Exchange.
Therefore in most cases a new certificate is used, either as a replacement for the SSL certificate on all servers (so it has common name, legacy URL, autodiscover and the server names) or as an additional certificate.
Simon.Simon Butler, Exchange MVP
Blog |
Exchange Resources
February 1st, 2011 4:47pm
I have an existing Exchange 2007 infrastructure with 2 2k7 servers in one organization. Each one has a current SSL cert for OWA. I am planning my upgrade process to 2010 and would like to know if the existing SSL certificate will migrate
and apply to the new exchange installation? I am planning on upgrading in place on the same boxes that i have 2k7 installed on. Thanks.
Firstly, you can't upgrade in place. Exchange 2010 needs to be installed on new servers and your data and services transitioned across.
You can probably use the existing cert for externally published services (eg on your ISA server) but since the new Exchange 2010 server(s) will have new names I'd recommend generating new SAN certificates for them.Paul Cunningham (MCITP) Get more Exchange tips and tutorials at: http://exchangeserverpro.com and the Exchange Server 2003 to 2010 Migration Guide: http://exchangeserverpro.com/exchange-2003-2010-migration-guide
Free Windows Admin Tool Kit Click here and download it now
February 1st, 2011 7:19pm
Hi,
As Paul said, You can't perform an in-place upgrade from Exchange 2007 to Exchange 2010.
Gen Lin
TechNet Subscriber Support
in forum
If you have any feedback on our support, please contact
tngfb@microsoft.com
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. Thanks
Gen Lin-MSFT
February 2nd, 2011 1:24am
Thanks. i was unclear on the upgrade process. So it really is not an 'Upgrade'. You have to build a new exchange server and 'Migrate' to it. Not a trivial process for an SMB. I will adjust my plans accordingly.
Free Windows Admin Tool Kit Click here and download it now
February 7th, 2011 8:16am