Replace self-signed cert by CA cert

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

Tony WONG - 18 Jul 2008 10:33 GMT

A request is generated from new-exchangecertificate
A cer is got from CA
import is done

thumbprint is not found when i run enable-exchangecertificate CA cert

i do not find CA cert when run get-exchangecertificate

i find the CA ecert from cert mmc

how should i do?

i tried to replace the self-signed cert by the CA cert at IIS, the CA cert
is available to be replaced.

i did not take the above step since i have not yet enabled the cert by
enable-exchangecertificate.

i need the ecert as OWA, activesyn, outlook anywhere.

do you have any advice to me?

Thanks a lot.

tony

Reply to this Message

c0d3r - 23 Jul 2008 00:06 GMT

have a look on my blog
https://petersblog.dyndns.org:8899/Lists/Posts/Post.aspx?ID=66

search for New-ExchangeCertificate and you'll find a quick howto

In short :
- generate the request using New-ExchangeCertificate
- Make sure to include all SAN attributes (Subject Alternate names, the URL
FQDNs that will be used by the various roles on your Exchange server
(autodiscover, owa, etc)
- sign the request on the CA (using a Webserver certificate template)
- get the signed request from the CA and copy it onto your Exchange server
i- mport it using Import-ExchangeCertificate

It may not be that important, but it is recommended to also install the root
CA certificate of the CA that has signed your certificate on your Exchange
server

Then enable the certificate

P

>A request is generated from new-exchangecertificate
> A cer is got from CA
[quoted text clipped - 21 lines]
>
> tony

Reply to this Message