locked
Receive 12017 & 12018 Exchange Server Logs RRS feed

  • Question

  • Dear Members,

    I have Installed both  Exchange Server 2007 , Version: 08.01.0436.000 and Domain Controller on Single machine (Windows Server 2008 Enterprise SP-2). I have received the following event ID's. Before I never renew a Internal Certificates as log shows so please help me out to resolve this Problem. Following are the error logs:

    (Event ID: 12017 MS Exchange Transport )An internal transport certificate will expire soon. Thumbprint:1B5512E1A8660E6CB41CA0E54EA76171FB06445D, hours remaining: 301

    - System

       
    - Provider
          [ Name] MSExchangeTransport
       
    - EventID 12017
          [ Qualifiers] 32772
       
      Level 3
       
      Task 12
       
      Keywords 0x80000000000000
       
    - TimeCreated
          [ SystemTime] 2011-03-02T05:10:07.000Z
       
      EventRecordID 1382174
       
      Channel Application
       
      Computer 4mwpk03.4mwirelesspk.local
       
      Security
    - EventData
        1B5512E1A8660E6CB41CA0E54EA76171FB06445D
      --

    301

     

     

    Event ID :12108, The STARTTLS certificate will expire soon: subject: 4mwpk03.4mwirelesspk.local, hours remaining: 1B5512E1A8660E6CB41CA0E54EA76171FB06445D. Run the New-ExchangeCertificate cmdlet to create a new certificate.

    - System

       
    - Provider
          [ Name] MSExchangeTransport
       
    - EventID 12018
          [ Qualifiers] 32772
       
      Level 3
       
      Task 12
       
      Keywords 0x80000000000000
       
    - TimeCreated
          [ SystemTime] 2011-03-02T05:10:07.000Z
       
      EventRecordID 1382175
       
      Channel Application
       
      Computer 4mwpk03.4mwirelesspk.local
       
      Security
    - EventData
        4mwpk03.4mwirelesspk.local
        1B5512E1A8660E6CB41CA0E54EA76171FB06445D
       

    301

     

     

    -----------------------------------------------------------------------------------------------------------------------------------
    Thanks in advance


    LeoN
    Wednesday, March 2, 2011 5:40 AM

Answers

  • You will first need to add a new certificate and assign the new certificate to our roles such as POP, SMTP and IMAP. Then delete the old certificate. See below how to do it.

    http://msexchangegeek.com/2009/04/24/how-to-renew-a-self-signed-certificate-in-exchange-server-2007/

    • Proposed as answer by emma.yoyo Friday, March 4, 2011 7:43 AM
    • Marked as answer by emma.yoyo Wednesday, March 9, 2011 1:06 AM
    Wednesday, March 2, 2011 5:57 AM
  • Hi,

    Since it is a internal transport certificate, you can just renew the certificate.

    The internal transport certificate will expire soon

    http://technet.microsoft.com/en-us/library/bb217963(EXCHG.80).aspx

    Also you can follow below article to Renewing the self-signed certificate

     


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    • Proposed as answer by emma.yoyo Friday, March 4, 2011 7:43 AM
    • Marked as answer by emma.yoyo Wednesday, March 9, 2011 1:06 AM
    Wednesday, March 2, 2011 8:30 AM
  • Then it's comming from HUB Transport as the Edge Transport role cannot coexist with the other Exchange roles.
    Jesper Bernle | Blog: http://xchangeserver.wordpress.com
    • Marked as answer by emma.yoyo Wednesday, March 9, 2011 1:07 AM
    Wednesday, March 2, 2011 11:35 AM
  • Hi Honey,

    Any updates?


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    • Marked as answer by Honey Leon Friday, March 11, 2011 9:27 AM
    Friday, March 4, 2011 7:43 AM

All replies

  • You will first need to add a new certificate and assign the new certificate to our roles such as POP, SMTP and IMAP. Then delete the old certificate. See below how to do it.

    http://msexchangegeek.com/2009/04/24/how-to-renew-a-self-signed-certificate-in-exchange-server-2007/

    • Proposed as answer by emma.yoyo Friday, March 4, 2011 7:43 AM
    • Marked as answer by emma.yoyo Wednesday, March 9, 2011 1:06 AM
    Wednesday, March 2, 2011 5:57 AM
  • Will it take any down time or any cause of problem. All roles of Exchange Server is configured on one server with DC?
    LeoN
    Wednesday, March 2, 2011 6:17 AM
  • It might. I don't usually have all the Exchange roles on one box. I think it will disconnect the users from the server so I would suggest to do it after hours.
    Wednesday, March 2, 2011 6:30 AM
  • Hi,

    Since it is a internal transport certificate, you can just renew the certificate.

    The internal transport certificate will expire soon

    http://technet.microsoft.com/en-us/library/bb217963(EXCHG.80).aspx

    Also you can follow below article to Renewing the self-signed certificate

     


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    • Proposed as answer by emma.yoyo Friday, March 4, 2011 7:43 AM
    • Marked as answer by emma.yoyo Wednesday, March 9, 2011 1:06 AM
    Wednesday, March 2, 2011 8:30 AM
  • How to check whether warning occurred on an Edge Transport server or on a Hub Transport server? I have configured all roles in one machine 
    LeoN
    Wednesday, March 2, 2011 9:53 AM
  • Then it's comming from HUB Transport as the Edge Transport role cannot coexist with the other Exchange roles.
    Jesper Bernle | Blog: http://xchangeserver.wordpress.com
    • Marked as answer by emma.yoyo Wednesday, March 9, 2011 1:07 AM
    Wednesday, March 2, 2011 11:35 AM
  • I would suggest to renew the certificate on both HT and ET. This will allow the servers to both have the same expiry date and it will be easier to remember than having to remember different date/year for each renew.
    Thursday, March 3, 2011 9:06 PM
  • Hi Honey,

    Any updates?


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    • Marked as answer by Honey Leon Friday, March 11, 2011 9:27 AM
    Friday, March 4, 2011 7:43 AM
  • Sorry for Late Reply, Exchange Certificate is Updated Successfully, Thank you Guys for your great help!
    LeoN
    Friday, March 11, 2011 9:27 AM