Right now i have exchange 2010/2013 environment. just have 1 exchange 2013 cu8 in our environment. i used public sa certificate where i export from exchange 2010 server. However, i'm not able to import into exchange 2013 where it said that certificate has exist. i can confirm that certificate is not exist and i used EMS to confirm that with get-exchangecertificate command.

To resolve this issue, i import the pfx file using conventional way which is using certificate mmc and importing into personal -> certificates location where after that exchange 2013 able to pick-up that cert automatically. so, my question are:

1. is it ok my step ? do i break anything ?

2. after assign services to that cert, how do i un-select it ? because i can't do that because the 'tick-box' is disabled.

Hi,

According to your description, I understand that you want to request certificate for new Exchange 2013.
If I misunderstand your concern, please do not hesitate to let me know.

What certificate are you used, wildcard certificate? If so, you can import it to Exchange 2013. Then run Get-ExchangeCertificate to confirm the services for this certificate.

Instead, if you want to deploy co-existence Exchange 2010 with Exchange 2013, the client access always connect to Exchange 2013 server first. Also we have change the DNS record, so we need request a new certificate with all the required SAN for Exchange 2013. More details please refer to Digital Certificates Configurations section: http://blogs.technet.com/b/meamcs/archive/2013/07/25/part-2-step-by-step-exchange-2007-to-2013-migration.aspx

Thanks