Search This Blog

Thursday, 4 July 2013

Exchange 2010 - How to renew a SSL Certificate with DigiCert Part 2

Part 2 of how to install an SSL Certificate for Exchange 2010

Step 16 - Order

media_1372937898708.png

The order is now processing and will be available in the next 30 mins.

Step 17 - Download Certificate

media_1372939657246.png

When the Certificate is available choose the option to download the certificate, choose the right version for your Server Software.

Step 18 - Transfer CER file to Exchange Server

media_1372939734523.png

Transfer the CER file to the root of the Exchange Server.

Step 19 - Import CER file with Powershell

media_1372939785824.png

Import the CER file using the following Powershell cmd

Import-ExchangeCertificate -FileData ([Byte[]]$(Get-Content -Path c:\mycert.cer -Encoding byte -ReadCount 0)) | Enable-ExchangeCertificate -Services "IIS,POP,IMAP,SMTP"

Step 20 - Check Certificates in use

media_1372940041464.png

Use the Get-ExchangeCertificate cmd to check the certificates installed, you will now see you have the renewed certificate and the old certificate. You now need to remove all the old expired certificates.

Step 21 - Confirm Renewed Certificate

media_1372940065057.png

Use the Get-ExchangeCertificate | FL cmd to show the certificate details and confirm the renewed certificate is installed as Valid and has the correct notAfter date.

Step 22 - Remove Expired Certificates

media_1372940196350.png

Use the Get-ExchangeCertificate cmd and find any certificate that has expired or is no longer required. Copy the Thumbprint to the clipboard.

Step 23 - Remove Certificate cmd

media_1372940240293.png

Enter the cmd to remove the certificate with the Thumbprint on the clipboard.

Remove-ExchangeCertificate -Thumbprint Thumbprint

Step 24 Check Certificate on Service

media_1372940342451.png

Visit the Exchange Outlook Web App and check the certificate displayed is the renewed certificate.

1 comment:

  1. Thanks for this i have bookmark the guide just incase i ever have to do this again next time my server crashes cheap wildcard ssl

    ReplyDelete