Is PKI Certificates for Shared mailbox can be automatically renewed in M365 Outlook?

Question

Most of our Shared / Generic mailbox have moved to M365.

Currently we are still doing manual renewal of PKI certificates on these.

Can this be automatically renewed in Azure AD? If yes, how?

Answer 1

Hi Ruiz,

Yes, Azure AD provides a convenient way to automatically renew PKI certificates through its Certificate Automatic Renewal feature. This feature enables organizations to streamline the certificate renewal process and eliminate the need for manual intervention.

To leverage automatic certificate renewal in Azure AD, follow these steps:

Begin by logging in to the Azure portal (portal.azure.com) using your Azure AD administrator credentials.

Navigate to the Azure Active Directory service.

On the left-hand menu, select "Certificates & secrets."

Choose the specific certificate from the list that you wish to set up for automatic renewal.

Within the certificate details pane, navigate to the "Renewal" tab.

Toggle the "Automatic renewal" option to the "On" position.

Configure the desired settings for renewal, such as the renewal period and notification preferences.

Save the changes to activate the automatic renewal feature.

By enabling automatic renewal, Azure AD will handle the certificate renewal process based on the specified renewal period. Additionally, you can opt to receive notifications before each renewal occurs, ensuring you stay informed throughout the process.

Please be aware that this automatic renewal functionality applies specifically to certificates issued by Azure AD's built-in public key infrastructure (PKI). If you are utilizing certificates from an external PKI, you may need to explore alternative solutions tailored to that particular PKI for automating certificate renewal.

It's crucial to have the appropriate permissions and access rights within Azure AD to manage certificates and configure automatic renewal.

As certificate management practices and Azure AD features may evolve over time, I recommend referring to the official Azure AD documentation and resources for the most up-to-date instructions and guidance on certificate management and the automatic renewal process.

Please let me know if this helps?