locked
Certificate Expiry Impact on Exchange 2003 server RRS feed

  • Question

  • Team,

    Currently we have following mail flow configuration;

    Internet Emails > Ironport > Exchange 2003 (acting as smart host) > Exchange 2010 servers

    Whole migration from Exchange 2003 server to Exchange 2010 server has been done and applied 3rd party SSL certificate on Exchange 2010 servers also.

    Thing is 3rd party Certificate on Exchange 2003 is getting expired in month.

    --> Will there be any impact on mail flow as Exchange 2003 server is acting as smart host?

    --> Is it compulsory to extend Exchange 2003 certificate or not required?

    --> We are going to decommission Exchange 2003 server in couple of months

    Thanks,

    Mihir

    Wednesday, May 14, 2014 1:27 PM

Answers

  • --> Will there be any impact on mail flow as Exchange 2003 server is acting as smart host?
    No
    --> Is it compulsory to extend Exchange 2003 certificate or not required?
    Yes
    --> We are going to decommission Exchange 2003 server in couple of months
    Still you will have to renew the Cert.

    Note: Make sure you renew the Cert properly.
    http://enterpriseit.co/microsoft-exchange/renew-exchange-2003-ssl-certificate/


    Cheers,

    Gulab Prasad

    Technology Consultant

    Blog: http://www.exchangeranger.com    Twitter:   LinkedIn:
       Check out CodeTwo’s tools for Exchange admins

    Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

    Thursday, May 15, 2014 9:40 AM
  • No, there wouldn't be any email impact as long as Exchange 2010 has Cert Installed and Configured.
    Make sure you have created and configured Send Connector.

    Cheers,

    Gulab Prasad

    Technology Consultant

    Blog: http://www.exchangeranger.com    Twitter:   LinkedIn:
       Check out CodeTwo’s tools for Exchange admins

    Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

    Thursday, May 15, 2014 10:17 AM

All replies

  • Appreciate any update on this from anyone please.

    Thanks.

    Wednesday, May 14, 2014 2:28 PM
  • Appreciate any update on this from anyone please.
    Wednesday, May 14, 2014 5:39 PM
  • Whole migration from Exchange 2003 server to Exchange 2010 server has been done and applied 3rd party SSL certificate on Exchange 2010 servers also.

    Hi,

    According to your description, everything about exchange 2010 is ready.

    Why don't you follow the mail flow as below?

    Internet Emails > Ironport > Exchange 2010 (smart host) > Exchange 2003 servers

    Please refer to the following article:

    Move Internet Mail Flow from Exchange 2003 to Exchange 2010


    1. Configure mail flow by using one of the methods listed below depending on the needs of your organization. This will enable Internet message flow through your Exchange 2010 Hub Transport servers.
    2. Remove the SMTP connector in Exchange 2003 that is used to handle Internet mail. Your account needs to be a member of the local administrators group and a member of a group that has had the Exchange Administrators role applied at the administrative group level.
      1. In Exchange System Manager, expand the Organization node, expand Administrative Groups, expand <AdministrativeGroupName>, expand Routing Groups, expand <RoutingGroupName>, and then select Connector.
      2. In the right-hand pane, right-click the connector you want to delete and select Delete.
      3. Click OK to confirm the deletion.

    Hope this helps!

    Thanks.


    Niko Cheng
    TechNet Community Support

    Thursday, May 15, 2014 9:33 AM
    Moderator
  • --> Will there be any impact on mail flow as Exchange 2003 server is acting as smart host?
    No
    --> Is it compulsory to extend Exchange 2003 certificate or not required?
    Yes
    --> We are going to decommission Exchange 2003 server in couple of months
    Still you will have to renew the Cert.

    Note: Make sure you renew the Cert properly.
    http://enterpriseit.co/microsoft-exchange/renew-exchange-2003-ssl-certificate/


    Cheers,

    Gulab Prasad

    Technology Consultant

    Blog: http://www.exchangeranger.com    Twitter:   LinkedIn:
       Check out CodeTwo’s tools for Exchange admins

    Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

    Thursday, May 15, 2014 9:40 AM
  • Thanks Niko, but as I said we are going to decommisison EX 2k3 server in a month or two and will be putting EX 2010 as smart host. So I dont think will do configuration twice.
    Thursday, May 15, 2014 10:03 AM
  • Thanks Gulab. I do understand it is compulsory to renew the certificate, but as you wrote there should be no impact on the emails, correct? As we are going to decommission EX 2k3 in max a month.

    Thursday, May 15, 2014 10:05 AM
  • No, there wouldn't be any email impact as long as Exchange 2010 has Cert Installed and Configured.
    Make sure you have created and configured Send Connector.

    Cheers,

    Gulab Prasad

    Technology Consultant

    Blog: http://www.exchangeranger.com    Twitter:   LinkedIn:
       Check out CodeTwo’s tools for Exchange admins

    Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

    Thursday, May 15, 2014 10:17 AM