Is PKI Certificates for Shared mailbox can be automatically renewed in M365 Outlook?

Ruiz Nelli 20 Reputation points

Most of our Shared / Generic mailbox have moved to M365.

Currently we are still doing manual renewal of PKI certificates on these.

Can this be automatically renewed in Azure AD? If yes, how?

Microsoft Exchange Online
Azure Cloud Services
Azure Cloud Services
An Azure platform as a service offer that is used to deploy web and cloud applications.
676 questions
A family of Microsoft email and calendar products.
3,406 questions
Microsoft Exchange Online Management
Microsoft Exchange Online Management
Microsoft Exchange Online: A Microsoft email and calendaring hosted service.Management: The act or process of organizing, handling, directing or controlling something.
4,374 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,630 questions
0 comments No comments
{count} votes

Accepted answer
  1. RevelinoB 2,780 Reputation points

    Hi Ruiz,

    Yes, Azure AD provides a convenient way to automatically renew PKI certificates through its Certificate Automatic Renewal feature. This feature enables organizations to streamline the certificate renewal process and eliminate the need for manual intervention.

    To leverage automatic certificate renewal in Azure AD, follow these steps:

    Begin by logging in to the Azure portal ( using your Azure AD administrator credentials.

    Navigate to the Azure Active Directory service.

    On the left-hand menu, select "Certificates & secrets."

    Choose the specific certificate from the list that you wish to set up for automatic renewal.

    Within the certificate details pane, navigate to the "Renewal" tab.

    Toggle the "Automatic renewal" option to the "On" position.

    Configure the desired settings for renewal, such as the renewal period and notification preferences.

    Save the changes to activate the automatic renewal feature.

    By enabling automatic renewal, Azure AD will handle the certificate renewal process based on the specified renewal period. Additionally, you can opt to receive notifications before each renewal occurs, ensuring you stay informed throughout the process.

    Please be aware that this automatic renewal functionality applies specifically to certificates issued by Azure AD's built-in public key infrastructure (PKI). If you are utilizing certificates from an external PKI, you may need to explore alternative solutions tailored to that particular PKI for automating certificate renewal.

    It's crucial to have the appropriate permissions and access rights within Azure AD to manage certificates and configure automatic renewal.

    As certificate management practices and Azure AD features may evolve over time, I recommend referring to the official Azure AD documentation and resources for the most up-to-date instructions and guidance on certificate management and the automatic renewal process.

    Please let me know if this helps?

    0 comments No comments

0 additional answers

Sort by: Most helpful