Question

How to renew expired Exchange 2007 certificate

Answer 1

We can find that our Exchange 2007 server has expired our certificate, by default when installing our Exchange 2007 server we will see that it generates a certificate issued by the server through its internal CA with a duration of 1 year. To renew it for 5 years we have to do the following:


First it is convenient to make a backup copy of the certificate just in case.

• We go to the Exchange PowerShell, it is located at:

 Start / All Programs / Microsoft Exchange 2007 / Microsoft Exchange Management Shell 

• Once inside, we introduce the following command to know which is the Exchange certificate to generate the renewal:

 Get-ExchangeCertificate 

• Viewing the certificates that we have on the server, we will renew by cloning the certificate already signed, we will keep all the data but the validity will be renewed from this moment to 5 years onwards. As you can see we will see Thumbprint , the services have associated and additional information. Copy the Thumbprint of the Exchange certificate that we want to renew, then enter the following command, taking into account that if you want to put fewer services you can exclude them or include them according to your purpose or needs:

 Get-ExchangeCertificate <thumbprint> | New-ExchangeCertificate -Services SMTP, POP, IMAP, IIS 

• Once the certificate has been cloned to a new one, we verify that our certificate is integrated through the following command:

 Get-ExchangeCertificate 

• Finally, we only have to enable the new certificate:

 Enable-ExchangeCertificate <thumbprint> 

• And eliminate the old one with:

 Remove-ExchangeCertificate -Thumbprint 

Take into account that it will take a few minutes to start recognizing the new certificate through Owa or Outlook etc. .. you will only have to reinstall it in the client machines and you will have everything renewed for 5 more years.

---