已答复 Trouble with certificate

  • 2012年1月31日 17:17
     
     

    Hello,

    we just tried to install a trusted certificate to our Exchange 2010 server.

    That process suceeded but i can't see the certificate neither in the gui nor in the certificate mmc nor via powershell.

    For example I try to delete the certificat. The following comes up.

    [PS] C:\Windows\system32>remove-exchangecertificate -Thumbprint XXX

    Confirm
    Are you sure you want to perform this action?
    Remove certificate with thumbprint XXX from the computer's certificate store?
    [Y] Yes  [A] Yes to All  [N] No  [L] No to All  [?] Help (default is "Y"): Y
    The certificate with thumbprint XXX was found but is not valid for use with Exchange Server (reason: PrivateKeyMissing).
        + CategoryInfo          : NotSpecified: (:) [Remove-ExchangeCertificate], InvalidOperationException
        + FullyQualifiedErrorId : 7752D1AB,Microsoft.Exchange.Management.SystemConfigurationTasks.RemoveExchangeCertificate

    Every other command concerning this certificate will cause the same message.

    Any ideas what I can do to fix this?

     

    regards

     


    • 已编辑 happyquestion 2012年2月1日 9:50 wrong sentence corrected
    •  

全部回复

  • 2012年2月1日 10:35
     
     

    Is it possible to import a certificate request file?

  • 2012年2月2日 10:43
    版主
     
     已答复

    Hi,

     

    What is the result of this command Get-ExchangeCertificate?

     

    From the error information, your certificate is not used by Exchange Server.

     

    If you want to install a trusted certificate to your Exchange Server , you can refer to these documents:

     

    Create a New Exchange Certificate

    http://technet.microsoft.com/en-us/library/dd351057.aspx

     

    Import an Exchange Certificate

    http://technet.microsoft.com/en-us/library/dd351183.aspx

     

    Thanks,


    Evan


    Evan Liu

    TechNet Community Support

  • 2012年2月3日 21:49
     
     已答复

    The private key is missing.  It sounds like the certificate was imported but without the private key.  If this is the case, you should export the certificate from another server with the private key and then import it.  Then it will be valid for use with Exchange.  In the meantime, you can launc the Certificates MMC for the local computer and then delete the certificate from the Personal store.

    Brian

  • 2012年2月7日 15:17
     
     

    Regarding the question about importing a certificate request file.  The answer is no.  You can import a certificate.  The request file is used to generate a certificate but is not valid by itself.

    Brian