This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(217.60000000000002, 68%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJB%3C/text%3E%3C/svg%3E)
Hello all,
I am currently setting up an Exchange Server & Outlook for a website and have been trying to install a certificate for Domain Validation.
I opened the Exchange Server Powershell and imported it with Import-ExchangeCertificate -Server "<ServerName>" -FileData ([System.IO.File]::ReadAllBytes('C:\Certificates\groupname.p7c')) -PrivateKeyExportable:$true -Password (ConvertTo-SecureString -String '<password>' -AsPlainText -Force),
then attempted to enable it with Enable-ExchangeCertificate -Server "<ServerName>" -Thumbprint <XXXXXXXXXXXXXXXXXXXXX> -Services SMTP,IMAP,IIS
and got back this error:
A special Rpc error occurs on server SERVERNAME: The certificate with thumbprint XXXXXXXXXXXXXXXXXXXXX was found but is not valid for use with Exchange Server (reason: PrivateKeyMissing). + CategoryInfo : NotSpecified: (:) [Enable-ExchangeCertificate], InvalidOperationException + FullyQualifiedErrorId : [Server=<SERVER-NAME>,RequestId=d09d4e8e-b66e-4235-9aef-998de9bc86ab,TimeStamp=9/11/2022 9: 20:12 PM] [FailureCategory=Cmdlet-InvalidOperationException] DA6D9EA1,Microsoft.Exchange.Management.SystemConfigur ationTasks.EnableExchangeCertificate + PSComputerName : <servername.website_address>
For reference, I attempted to follow the instructions at website 0000251, and while using the command certutil -repairstore my “SerialNumber” in the command prompt a Windows Security tab popped up "Select a smart card device, connect a smart card."
Do I need a smart card to fix my certificate? I understand that an admin usually uses a smart card for the certutil command. Is there any other way I can fix the above issue PrivateKeyMissing? Thank you.
@Joshua B
I am writing here to confirm with you any update about this thread now.
If the suggestion below helps, please feel free to accept it as an answer to help more people.
We might have already had a private key issued out to us, however the one who could have received that information either misplaced it or didn't know what it was. Tomorrow we will call the certificate authority and settle this issue, either by getting a new certificate or getting the private key from them.
Your answer is simple and straightforward, sorry I responded so late. I saw your answer then kind of forgot about it. I will keep you updated though if I have any other relevant issues.
Thank you!
For Exchange server, you need to create Exchange Server certificate request for a certification authority, then use this certificate request to apply certificate from CA.
After that you will could import this certificate to Exchange server for completing the pending certificate request.
If you import a certificate to Exchange server without certificate request, it will failed due to the missing of private key.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Make sure the Exchange server supports your cert type for importing. The following types of certificate files are supported(Import or install a certificate on an Exchange server):
-PKCS #12 certificate files: Binary certificate files that have .cer, .crt, .der, .p12, or .pfx filename extensions, and require a password when the file contains the private key or chain of trust.
-PKCS #7 certificate files: Certificate files that have .p7b or .p7c filename extensions
Check these helpful links - https://community.spiceworks.com/topic/2315124-ssl-not-showing-in-exchange-2016-after-import
https://shellybhardwaj.medium.com/exporting-and-importing-exchange-server-2016-ssl-certificates-a97af2267469
https://www.digicert.com/support/tools/certificate-utility-for-windows