Răspuns Trouble with certificate

  • 31 ianuarie 2012 17:17
     
     

    Hello,

    we just tried to install a trusted certificate to our Exchange 2010 server.

    That process suceeded but i can't see the certificate neither in the gui nor in the certificate mmc nor via powershell.

    For example I try to delete the certificat. The following comes up.

    [PS] C:\Windows\system32>remove-exchangecertificate -Thumbprint XXX

    Confirm
    Are you sure you want to perform this action?
    Remove certificate with thumbprint XXX from the computer's certificate store?
    [Y] Yes  [A] Yes to All  [N] No  [L] No to All  [?] Help (default is "Y"): Y
    The certificate with thumbprint XXX was found but is not valid for use with Exchange Server (reason: PrivateKeyMissing).
        + CategoryInfo          : NotSpecified: (:) [Remove-ExchangeCertificate], InvalidOperationException
        + FullyQualifiedErrorId : 7752D1AB,Microsoft.Exchange.Management.SystemConfigurationTasks.RemoveExchangeCertificate

    Every other command concerning this certificate will cause the same message.

    Any ideas what I can do to fix this?

     

    regards

     


    • Editat de happyquestion 1 februarie 2012 09:50 wrong sentence corrected
    •  

Toate mesajele

  • 1 februarie 2012 10:35
     
     

    Is it possible to import a certificate request file?

  • 2 februarie 2012 10:43
    Moderator
     
     Răspuns

    Hi,

     

    What is the result of this command Get-ExchangeCertificate?

     

    From the error information, your certificate is not used by Exchange Server.

     

    If you want to install a trusted certificate to your Exchange Server , you can refer to these documents:

     

    Create a New Exchange Certificate

    http://technet.microsoft.com/en-us/library/dd351057.aspx

     

    Import an Exchange Certificate

    http://technet.microsoft.com/en-us/library/dd351183.aspx

     

    Thanks,


    Evan


    Evan Liu

    TechNet Community Support

  • 3 februarie 2012 21:49
     
     Răspuns

    The private key is missing.  It sounds like the certificate was imported but without the private key.  If this is the case, you should export the certificate from another server with the private key and then import it.  Then it will be valid for use with Exchange.  In the meantime, you can launc the Certificates MMC for the local computer and then delete the certificate from the Personal store.

    Brian

  • 7 februarie 2012 15:17
     
     

    Regarding the question about importing a certificate request file.  The answer is no.  You can import a certificate.  The request file is used to generate a certificate but is not valid by itself.

    Brian