Răspuns Trouble with certificate

  • 2012년 1월 31일 화요일 오후 5:17
     
     

    Hello,

    we just tried to install a trusted certificate to our Exchange 2010 server.

    That process suceeded but i can't see the certificate neither in the gui nor in the certificate mmc nor via powershell.

    For example I try to delete the certificat. The following comes up.

    [PS] C:\Windows\system32>remove-exchangecertificate -Thumbprint XXX

    Confirm
    Are you sure you want to perform this action?
    Remove certificate with thumbprint XXX from the computer's certificate store?
    [Y] Yes  [A] Yes to All  [N] No  [L] No to All  [?] Help (default is "Y"): Y
    The certificate with thumbprint XXX was found but is not valid for use with Exchange Server (reason: PrivateKeyMissing).
        + CategoryInfo          : NotSpecified: (:) [Remove-ExchangeCertificate], InvalidOperationException
        + FullyQualifiedErrorId : 7752D1AB,Microsoft.Exchange.Management.SystemConfigurationTasks.RemoveExchangeCertificate

    Every other command concerning this certificate will cause the same message.

    Any ideas what I can do to fix this?

     

    regards

     


    • 편집됨 happyquestion 2012년 2월 1일 수요일 오전 9:50 wrong sentence corrected
    •  

모든 응답

  • 2012년 2월 1일 수요일 오전 10:35
     
     

    Is it possible to import a certificate request file?

  • 2012년 2월 2일 목요일 오전 10:43
    중재자
     
     답변됨

    Hi,

     

    What is the result of this command Get-ExchangeCertificate?

     

    From the error information, your certificate is not used by Exchange Server.

     

    If you want to install a trusted certificate to your Exchange Server , you can refer to these documents:

     

    Create a New Exchange Certificate

    http://technet.microsoft.com/en-us/library/dd351057.aspx

     

    Import an Exchange Certificate

    http://technet.microsoft.com/en-us/library/dd351183.aspx

     

    Thanks,


    Evan


    Evan Liu

    TechNet Community Support

    • 답변으로 표시됨 Evan LiuModerator 2012년 2월 7일 화요일 오전 10:17
    •  
  • 2012년 2월 3일 금요일 오후 9:49
     
     답변됨

    The private key is missing.  It sounds like the certificate was imported but without the private key.  If this is the case, you should export the certificate from another server with the private key and then import it.  Then it will be valid for use with Exchange.  In the meantime, you can launc the Certificates MMC for the local computer and then delete the certificate from the Personal store.

    Brian

    • 답변으로 표시됨 Evan LiuModerator 2012년 2월 7일 화요일 오전 10:17
    •  
  • 2012년 2월 7일 화요일 오후 3:17
     
     

    Regarding the question about importing a certificate request file.  The answer is no.  You can import a certificate.  The request file is used to generate a certificate but is not valid by itself.

    Brian