Create a request for a certificate from a certification authority is missing

Question

To All,

I have installed new the Exchange Server 2016 CU23 in test environment. After restart and login via ecp then I go to create a new certificate, but I found the problem which "the Create request for a certificate from a certification authority is missing" that only one have a Create a self-signed certificate.
Please see the picture below, how I can get the Create request for a certificate from a certification authority?

]1

Thank you in advance,
Tanisorn

Answer 1

Hi @Tanisorn Sowudomsilp ,

To prevent misuse of UNC paths by attackers, Microsoft is removing parameters that take UNC paths as inputs from the Exchange Server PowerShell cmdlets and the Exchange Admin Center.

In Exchange 2016 CU23 and later, the following certificate functionality in EAC is removed:

1. Import & Export Exchange Certificate.
2. Complete Exchange Certificate Request
3. New Exchange Certificate Request from CA
4. Renew Exchange Certificate Request

Details: changes-in-exchange-server-powershell-cmdlets-and-exchange-admin-center-for-unc-path-inputs-kb5014278-36af1640-4389-4ff1-b805-d1d63715a0dd

Therefore, you cannot use ECP to request a new certificate from a certificate authority, only EMS.
How to use EMS to create a certificate request, please refer to the official documentation: create-ca-certificate-requests

---

If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.