How to renew an expired Microsoft Exchange Server Auth Certificate.

Rudolf Amarlapudi 456

Hello,

We are running an Exchange 2016 Server (Version 15.1 ‎(Build 2242.4)‎.

I found that the self-signed certificate has expired.

There currently is no impact because I believe IIS & SMTP is being handled by the UCC Wildcard certificate purchased via Go Daddy.

I need to renew the expired self-signed certificate just to ensure all stored certificates are valid. Could you furnish recommended steps on how to accomplish this.

On a related note, when multiple certificates are assigned to SMTP, which is the server "using" for communication?

Thanks in advance.

Regards,
Rudy

1 answer

Andy David - MVP 142.3K Reputation points MVP

2021-06-17T20:32:50.48+00:00

Follow:
http://byronwright.blogspot.com/2018/05/expired-microsoft-exchange-server-auth.html

or

https://www.nucleustechnologies.com/blog/resolve-the-auth-certificate-missing-error-in-exchange-2016-2013/

I have used the first link in the past and it worked great.
Please sign in to rate this answer.

2 people found this answer helpful.
JeffYang-MSFT 6,241 Reputation points Microsoft Vendor

2021-06-18T08:52:37.843+00:00

Hi @Rudolf Amarlapudi ,

Agree with Andy. And to confirm which is the current default SMTP certificate the server is "using" for communication, you could try steps below:

Run the get-transportserver command to get current SMTP certificate Thumbprint.
get-transportserver | select InternalTransportCertificateThumbprint.

Run the get-exchangecertificate command to get all your certificate on your Exchange server.

Compare the Thumbprint you got in step1,2 and we could find that the current default SMTP certificate is the certificate whose subject is “CN=Exchange2016”.

Notice: In order to protect your personal information, I modified your screenshots in your post. Thanks for your understanding and support.

Hope this could help.

Rudolf Amarlapudi 456 Reputation points

2021-06-18T23:52:55.017+00:00

Thank you both. I am going through the pre-checks. I ran the commands to confirm which is being used. The output doesn't have any matching certs. Am I missing something?

JeffYang-MSFT 6,241 Reputation points Microsoft Vendor

2021-06-22T08:41:14.493+00:00

Hi @Rudolf Amarlapudi ,

A little bit weird. I tried the same command in different environment and it seems just work fine. Have you already renewed your invalid certificate yet? How would everything be like if you try the same operation after you complete the renewal?

If you do still would like to further research about it, I would suggest you to check your certificates with the Certificate Manager tool and see if the certificate matching the thumbprint can be found. For detailed steps: How to: View certificates with the MMC snap-in.

JeffYang-MSFT 6,241 Reputation points Microsoft Vendor

2021-06-25T09:26:01.997+00:00

Hi @Rudolf Amarlapudi ,
It has been a while, how is everything going?
If you have any update about this issue, please feel free to post back.
Sign in to comment