locked
renew exchnage 2010 certificate RRS feed

  • Question

  • Hi,

    My exchange server 2010 ssl certificate is going to expire and when i select renew and generate csr but when i check the csr it show invalid pls. help me to generate renew csr. 

    pls. help me how i generate renew csr.

    Sunit Kumar

     

    Saturday, March 7, 2015 5:14 AM

Answers

  • Hello Sunit,

    Certificate can show as 'Invalid' when the certificate cannot be verified to a trusted certificate authority, when the certificate has been issued by a private certificate authority.

    To correct the problem you must install the root certificate for the certificate authority. The authority can provide you the same. Mostly you can find it on the original package they sent when you get the certificate for the first time.

    In other case, if you use a private certificate authority (Internal CA), this can be obtained from the web enrollment page (eg http://CA/certsrv).


    Regards from Visit ExchangeOnline | Visit WindowsAdmin

    Saturday, March 7, 2015 6:28 AM
  • Hi Sunit,
    Adding few points to the above.
    You can use this to create CSR easily. http://gallery.technet.microsoft.com/Exchange-20072010-and-2013-17a0b52f

    Then click on server configuration, You can see the new request created. Issue a certificate using the CSR created and complete the request. Below is a reference.
    https://www.digicert.com/ssl-certificate-installation-microsoft-exchange-2010.htm


    Thanks, MAS
    Please mark as helpful if you find my comment helpful or as an answer if it does answer your question. That will encourage me - and others - to take time out to help you.

    Sunday, March 8, 2015 6:10 AM

All replies

  • Hello Sunit,

    Certificate can show as 'Invalid' when the certificate cannot be verified to a trusted certificate authority, when the certificate has been issued by a private certificate authority.

    To correct the problem you must install the root certificate for the certificate authority. The authority can provide you the same. Mostly you can find it on the original package they sent when you get the certificate for the first time.

    In other case, if you use a private certificate authority (Internal CA), this can be obtained from the web enrollment page (eg http://CA/certsrv).


    Regards from Visit ExchangeOnline | Visit WindowsAdmin

    Saturday, March 7, 2015 6:28 AM
  • Hi Sunit,
    Adding few points to the above.
    You can use this to create CSR easily. http://gallery.technet.microsoft.com/Exchange-20072010-and-2013-17a0b52f

    Then click on server configuration, You can see the new request created. Issue a certificate using the CSR created and complete the request. Below is a reference.
    https://www.digicert.com/ssl-certificate-installation-microsoft-exchange-2010.htm


    Thanks, MAS
    Please mark as helpful if you find my comment helpful or as an answer if it does answer your question. That will encourage me - and others - to take time out to help you.

    Sunday, March 8, 2015 6:10 AM