Exchange Server 2019 - Renovación de certificado

Jose Rene Rangel 20

Tengo un servidor con Exchange 2019 se vencio el certificado firmado de una autoridad de certificacion

User's image

Ejecute la renovacion y envie el archivo .req

Me devolvieron el archivo.crt lo aplico pero no desaparece el estado invalido y el pedido pendiente

User's image

Agradezco la ayuda posible para solver este inconveniente

Saludos y muchas gracias

Rene

2 answers

Yuki Sun-MSFT 40,896 Reputation points

2023-01-13T03:23:49.41+00:00
Hi @Jose Rene Rangel,

Currently in Microsoft Q&A we only support English, could you please edit your question into English？Then we can help to solve your issues, thanks for your understanding.
Then based on a quick machine translation, my understanding is that the certificate still show as "Pending" after you renewing it, right? If this is the case, I'd suggest reviewing the document below to make sure you've followed the steps correctly to renew the certificate:
Renew an Exchange Server certificate

With this confirmed and the issue persists, please check the certificate via MMC, if it shows up properly with the private key, you could try the steps below and see the result.

Using MMC to export the certificate with the private key.

Delete this certificate from Exchange.

Put the certificate back into Exchange using the Import-ExchangeCertificate.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Please sign in to rate this answer.
Jose Rene Rangel 20 Reputation points

2023-01-17T07:57:27.1133333+00:00

Sorry about the Spanish, I tried to change it but it wasn't possible, it's not easy

Regarding my problem:

As I explained, when loading the .crt file through the console, it does not send any message that loaded it and the invalid status and the pending order still appear.

Check by MMC and the certificate is uploaded in two places:

The pending order and the valid status in: Certificates+LocalComputer+Personal+Certificates

The correct certificate with the key appears in:

Certificates+LocalComputer+Certificate Enrollment Request+Certificates

Can you please explain me how to execute these steps:

Use of MMC to export the certificate with the private key (what certificate and where do I get it?).

Delete this certificate from Exchange (What certificate should I delete and where do I locate it??).

Put the certificate back in Exchange using Import-ExchangeCertificate. (what certificate did I import??)

Greetings and thank you very much

Jose Rene Rangel 20 Reputation points

2023-01-23T08:37:41.2266667+00:00

Sorry about the Spanish, I tried to change it but it wasn't possible, it's not easy

Regarding my problem:

As I explained, when loading the .crt file through the console, it does not send any message that loaded it and the invalid status and the pending order still appear.

Check by MMC and the certificate is uploaded in two places:

The pending order and the valid status in: Certificates+LocalComputer+Personal+Certificates

The correct certificate with the key appears in:

Certificates+LocalComputer+Certificate Enrollment Request+Certificates

Can you please explain me how to execute these steps:

Use of MMC to export the certificate with the private key (what certificate and where do I get it?).

Delete this certificate from Exchange (What certificate should I delete and where do I locate it??).

Put the certificate back in Exchange using Import-ExchangeCertificate. (what certificate did I import??)

Greetings and thank you very much

Yuki Sun-MSFT 40,896 Reputation points

2023-01-23T08:37:53.18+00:00

Use of MMC to export the certificate with the private key (what certificate and where do I get it?).

Delete this certificate from Exchange (What certificate should I delete and where do I locate it??).

Put the certificate back in Exchange using Import-ExchangeCertificate. (what certificate did I import??)

Hi @Jose Rene Rangel ,

Is the certificate below that shows the "pending" status in your EAC? If it's true, just right click it, choose All tasks > Export:

Delete the "pending" certificate from within the Exchange admin center.

Import the certificate that is exported in step1.

Jose Rene Rangel 20 Reputation points

2023-01-23T08:38:09.79+00:00

Good morning Mr Yuki

Perform the steps you mention, it did not work, it does not delete the invalid status or the pending status

Please confirm if the steps I am doing to renew the certificate are correct:

From EAC generate the pending status dated 01-17-2023

Send the certificate5.req file to the certifying authority

They sent me three files with these extensions:

e5dd558d5a7b9873.crt

e5dd558d5a7b9873.pem

gd-g2_iis_intermediates.p7b

What should I do???

What is the correct procedure???
Sign in to comment
Yuki Sun-MSFT 40,896 Reputation points

2023-01-23T08:38:34.1566667+00:00

Hi @Jose Rene Rangel ,

They sent me three files with these extensions:

After receiving the certificate files, have you also followed the instructions in the document below to complete the request?
Complete a pending Exchange Server certificate request
Please sign in to rate this answer.
Yuki Sun-MSFT 40,896 Reputation points

2023-01-26T01:20:47.8+00:00

Hi @Jose Rene Rangel ,

It has been a few days, just wondering how things are going on with this issue. Any update, feel free to post back.
Sign in to comment

Share via

Exchange Server 2019 - Renovación de certificado

2 answers