已答复 Trouble with certificate

  • 31 มกราคม 2555 17:17
     
     

    Hello,

    we just tried to install a trusted certificate to our Exchange 2010 server.

    That process suceeded but i can't see the certificate neither in the gui nor in the certificate mmc nor via powershell.

    For example I try to delete the certificat. The following comes up.

    [PS] C:\Windows\system32>remove-exchangecertificate -Thumbprint XXX

    Confirm
    Are you sure you want to perform this action?
    Remove certificate with thumbprint XXX from the computer's certificate store?
    [Y] Yes  [A] Yes to All  [N] No  [L] No to All  [?] Help (default is "Y"): Y
    The certificate with thumbprint XXX was found but is not valid for use with Exchange Server (reason: PrivateKeyMissing).
        + CategoryInfo          : NotSpecified: (:) [Remove-ExchangeCertificate], InvalidOperationException
        + FullyQualifiedErrorId : 7752D1AB,Microsoft.Exchange.Management.SystemConfigurationTasks.RemoveExchangeCertificate

    Every other command concerning this certificate will cause the same message.

    Any ideas what I can do to fix this?

     

    regards

     


    • แก้ไขโดย happyquestion 1 กุมภาพันธ์ 2555 9:50 wrong sentence corrected
    •  

ตอบทั้งหมด

  • 1 กุมภาพันธ์ 2555 10:35
     
     

    Is it possible to import a certificate request file?

  • 2 กุมภาพันธ์ 2555 10:43
    ผู้ดูแล
     
     คำตอบ

    Hi,

     

    What is the result of this command Get-ExchangeCertificate?

     

    From the error information, your certificate is not used by Exchange Server.

     

    If you want to install a trusted certificate to your Exchange Server , you can refer to these documents:

     

    Create a New Exchange Certificate

    http://technet.microsoft.com/en-us/library/dd351057.aspx

     

    Import an Exchange Certificate

    http://technet.microsoft.com/en-us/library/dd351183.aspx

     

    Thanks,


    Evan


    Evan Liu

    TechNet Community Support

    • ทำเครื่องหมายเป็นคำตอบโดย Evan LiuModerator 7 กุมภาพันธ์ 2555 10:17
    •  
  • 3 กุมภาพันธ์ 2555 21:49
     
     คำตอบ

    The private key is missing.  It sounds like the certificate was imported but without the private key.  If this is the case, you should export the certificate from another server with the private key and then import it.  Then it will be valid for use with Exchange.  In the meantime, you can launc the Certificates MMC for the local computer and then delete the certificate from the Personal store.

    Brian

    • ทำเครื่องหมายเป็นคำตอบโดย Evan LiuModerator 7 กุมภาพันธ์ 2555 10:17
    •  
  • 7 กุมภาพันธ์ 2555 15:17
     
     

    Regarding the question about importing a certificate request file.  The answer is no.  You can import a certificate.  The request file is used to generate a certificate but is not valid by itself.

    Brian