Exchange 2007 Expired Certificate   

I'm running Exchange Server 2007 (no SP1 yet), with only two users.
I installed a certificate last year and didn't pay attention to the time 
length (one year).
Now, my users are getting annoying warnings when they open their Outlook. 
However, everything works fine, even OWA. You just have to click OK to the 
warning.
Is there a way (with Exchange PowerShell Console maybe) to renew the 
certificate?
I just want to avoid deleting the existing one and re-creating a new one.
Help appreciated.
Nicolas

date: Thu, 3 Apr 2008 22:33:47 +0200   author:   Nicolas Macarez

Re: Exchange 2007 Expired Certificate   

On Thu, 3 Apr 2008 22:33:47 +0200, "Nicolas Macarez" 
wrote:

>I'm running Exchange Server 2007 (no SP1 yet), with only two users.
>I installed a certificate last year and didn't pay attention to the time 
>length (one year).
>Now, my users are getting annoying warnings when they open their Outlook. 
>However, everything works fine, even OWA. You just have to click OK to the 
>warning.
>Is there a way (with Exchange PowerShell Console maybe) to renew the 
>certificate?
>I just want to avoid deleting the existing one and re-creating a new one.
>Help appreciated.
>Nicolas
>

When you say "installed it" I am assuming you got one from somewhere
else and replaced the self-signed one that gets applied on install.
Can you tell us more about this cert? Then you can be told what to do
next.

date: Thu, 03 Apr 2008 17:24:55 -0400   author:   Mark Arnold [MVP]

Re: Exchange 2007 Expired Certificate   

Thanks Mark,
No, as far as I remember, it is the self-signed certificate that gets 
applied on install.
Unlike Exchange Server 2003 where you need to install one by yourself 
(either your own or one 3rd party), I relied on this certificate installed 
by Exchange 2007 and didn't bother to install one by myself. Bad idea, I 
guess...
Regards
Nicolas

"Mark Arnold [MVP]"  a écrit dans le message de news: 
rniav3lji4cp02pflqjinoarbncjrmvqkn@4ax.com...
> On Thu, 3 Apr 2008 22:33:47 +0200, "Nicolas Macarez" 
> wrote:
>
>>I'm running Exchange Server 2007 (no SP1 yet), with only two users.
>>I installed a certificate last year and didn't pay attention to the time
>>length (one year).
>>Now, my users are getting annoying warnings when they open their Outlook.
>>However, everything works fine, even OWA. You just have to click OK to the
>>warning.
>>Is there a way (with Exchange PowerShell Console maybe) to renew the
>>certificate?
>>I just want to avoid deleting the existing one and re-creating a new one.
>>Help appreciated.
>>Nicolas
>>
>
> When you say "installed it" I am assuming you got one from somewhere
> else and replaced the self-signed one that gets applied on install.
> Can you tell us more about this cert? Then you can be told what to do
> next.

date: Fri, 4 Apr 2008 08:09:41 +0200   author:   Nicolas Macarez

Re: Exchange 2007 Expired Certificate   

New-ExchangeCertificate via Powershell

Read: http://technet.microsoft.com/en-us/library/aa998327(EXCHG.80).aspx

Running it without arguments will generate a new self signed cert. You can 
use Remove-ExchangeCertificate to get rid of the original self signed cert 
that was created upon install last year. Note when using 
Remove-ExchangeCertificate you specify the cert by it's thumbprint.

Oliver

date: Fri, 4 Apr 2008 13:14:26 +0100   author:   Oliver Moazzezi [MVP]

Re: Exchange 2007 Expired Certificate   

Thanks Oliver

New-ExchangeCertificate -Services IIS
was the right thing to do for me.
The warning disappeared in Outlook and everything works fine.

I tried to remove the other useless certificates with 
Remove-ExchangeCertificate -Thumbprint <String>
but one is still reluctant and says that it is the default certificate and 
can't be removed.
Is that normal?

Regards
Nicolas


"Oliver Moazzezi [MVP]"  a écrit dans le 
message de news: %23f2iu1klIHA.5268@TK2MSFTNGP05.phx.gbl...
> New-ExchangeCertificate via Powershell
>
> Read: http://technet.microsoft.com/en-us/library/aa998327(EXCHG.80).aspx
>
> Running it without arguments will generate a new self signed cert. You can 
> use Remove-ExchangeCertificate to get rid of the original self signed cert 
> that was created upon install last year. Note when using 
> Remove-ExchangeCertificate you specify the cert by it's thumbprint.
>
> Oliver
>
>

date: Sat, 5 Apr 2008 10:02:48 +0200   author:   Nicolas Macarez