
Once you have done this, you should check the new certificate is working, usually firing up Outlook on a client machine will prove this. You should take note of the new certificate thumbprint as we now need to enable the IIS services for it.Įnable-ExchangeCertificate –Thumbprint “ENTERYOURNEWCERTIFICATETHUMBPRINTHERE” –Services IIS This will create a new certificate you will then be prompted to confirm if you want to overwrite the expired certificate, you should press Y to overwrite and continue. Get-ExchangeCertificate –Thumbprint “ENTERYOURCURRENTCERTIFICATETHUMBPRINTHERE” | New-ExchangeCertificate Once you have the thumbprint, type the following command: You should then make a note of the Thumbprint for this certificate as you will need it. This will then display the expiry status and also the date and time of when the certificate expires(d). To do this, logon to your Exchange server as an enterprise admin (usually a domain admin is not enough…), then start up the Exchange Management Shell (EMS).


Exchange 2010 self signed certificate how to#
The following guide explains how to do this simple task.įirst of all, you should check the current certificate to ensure that it has expired.

To do this is very simple and can be done in minutes. If you are using an Exchange system and have self signed certificates, every year you will have to renew the certificate. An expired certificate may cause problems such as connectivity to web services, SMTP transport and Outlook prompting certificate security warnings which is extremely annoying for users and also can cause problems with Out of Office settings.
