Answered by:
Receive 12017 & 12018 Exchange Server Logs

Question
-
Dear Members,
I have Installed both Exchange Server 2007 , Version: 08.01.0436.000 and Domain Controller on Single machine (Windows Server 2008 Enterprise SP-2). I have received the following event ID's. Before I never renew a Internal Certificates as log shows so please help me out to resolve this Problem. Following are the error logs:
(Event ID: 12017 MS Exchange Transport )An internal transport certificate will expire soon. Thumbprint:1B5512E1A8660E6CB41CA0E54EA76171FB06445D, hours remaining: 301
- System - Provider [ Name] MSExchangeTransport - EventID 12017 [ Qualifiers] 32772 Level 3 Task 12 Keywords 0x80000000000000 - TimeCreated [ SystemTime] 2011-03-02T05:10:07.000Z EventRecordID 1382174 Channel Application Computer 4mwpk03.4mwirelesspk.local Security - EventData 1B5512E1A8660E6CB41CA0E54EA76171FB06445D -- 301
Event ID :12108, The STARTTLS certificate will expire soon: subject: 4mwpk03.4mwirelesspk.local, hours remaining: 1B5512E1A8660E6CB41CA0E54EA76171FB06445D. Run the New-ExchangeCertificate cmdlet to create a new certificate.
- System - Provider [ Name] MSExchangeTransport - EventID 12018 [ Qualifiers] 32772 Level 3 Task 12 Keywords 0x80000000000000 - TimeCreated [ SystemTime] 2011-03-02T05:10:07.000Z EventRecordID 1382175 Channel Application Computer 4mwpk03.4mwirelesspk.local Security - EventData 4mwpk03.4mwirelesspk.local 1B5512E1A8660E6CB41CA0E54EA76171FB06445D 301
-----------------------------------------------------------------------------------------------------------------------------------Thanks in advance
LeoNWednesday, March 2, 2011 5:40 AM
Answers
-
You will first need to add a new certificate and assign the new certificate to our roles such as POP, SMTP and IMAP. Then delete the old certificate. See below how to do it.
http://msexchangegeek.com/2009/04/24/how-to-renew-a-self-signed-certificate-in-exchange-server-2007/
Wednesday, March 2, 2011 5:57 AM -
Hi,
Since it is a internal transport certificate, you can just renew the certificate.
The internal transport certificate will expire soon
http://technet.microsoft.com/en-us/library/bb217963(EXCHG.80).aspx
Also you can follow below article to Renewing the self-signed certificate
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.Wednesday, March 2, 2011 8:30 AM -
Then it's comming from HUB Transport as the Edge Transport role cannot coexist with the other Exchange roles.
Jesper Bernle | Blog: http://xchangeserver.wordpress.com- Marked as answer by emma.yoyo Wednesday, March 9, 2011 1:07 AM
Wednesday, March 2, 2011 11:35 AM -
Hi Honey,
Any updates?
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.- Marked as answer by Honey Leon Friday, March 11, 2011 9:27 AM
Friday, March 4, 2011 7:43 AM
All replies
-
You will first need to add a new certificate and assign the new certificate to our roles such as POP, SMTP and IMAP. Then delete the old certificate. See below how to do it.
http://msexchangegeek.com/2009/04/24/how-to-renew-a-self-signed-certificate-in-exchange-server-2007/
Wednesday, March 2, 2011 5:57 AM -
Will it take any down time or any cause of problem. All roles of Exchange Server is configured on one server with DC?
LeoNWednesday, March 2, 2011 6:17 AM -
It might. I don't usually have all the Exchange roles on one box. I think it will disconnect the users from the server so I would suggest to do it after hours.Wednesday, March 2, 2011 6:30 AM
-
Hi,
Since it is a internal transport certificate, you can just renew the certificate.
The internal transport certificate will expire soon
http://technet.microsoft.com/en-us/library/bb217963(EXCHG.80).aspx
Also you can follow below article to Renewing the self-signed certificate
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.Wednesday, March 2, 2011 8:30 AM -
How to check whether warning occurred on an Edge Transport server or on a Hub Transport server? I have configured all roles in one machine
LeoNWednesday, March 2, 2011 9:53 AM -
Then it's comming from HUB Transport as the Edge Transport role cannot coexist with the other Exchange roles.
Jesper Bernle | Blog: http://xchangeserver.wordpress.com- Marked as answer by emma.yoyo Wednesday, March 9, 2011 1:07 AM
Wednesday, March 2, 2011 11:35 AM -
I would suggest to renew the certificate on both HT and ET. This will allow the servers to both have the same expiry date and it will be easier to remember than having to remember different date/year for each renew.Thursday, March 3, 2011 9:06 PM
-
Hi Honey,
Any updates?
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.- Marked as answer by Honey Leon Friday, March 11, 2011 9:27 AM
Friday, March 4, 2011 7:43 AM -
Sorry for Late Reply, Exchange Certificate is Updated Successfully, Thank you Guys for your great help!
LeoNFriday, March 11, 2011 9:27 AM