Exchange Delegation Federation Certificate Expired

Question

Exchange Delegation Federation Certificate Expired

Ryan Kohn 1

We have a Federation Certificate that has expired on Sept 8th, 2021. I'm assuming if it expired, something would be broke? But, I, nor anyone else has seen any issues or reported any. Is there another certificate that it may possibly be using? From what I understand, this is for calendar free/busy. This was all set up by an employee who is not with us anymore and when we switched to Hybrid environment. Also, when going through Microsoft documentation on renewing an expired certificate, it says that one has to remove the trust and add it back. Isn't it possible to just add a new cert and assign the federation service to it? Sorry for the questions, but I am kind of lost. Thank you for any help! Much appreciated!

Ryan Kohn 135651-27-09-2021-12-42-certificates-microsoft-exchange.jpg

KyleXu-MSFT 25,866 Reputation points

2021-09-28T07:43:38.487+00:00

@Ryan Kohn

I am writing here to confirm with you any update about this thread now?
If you renew this certificate successfully, please be free to mark it as an answer for helping more people.
Ryan Kohn 1 Reputation point

2021-09-28T12:00:08.553+00:00

No, I have not renewed the certificate yet. I will update when I get that done.
KyleXu-MSFT 25,866 Reputation points

2021-10-04T08:37:48.86+00:00

Can you renew the certificate successfully? If you get error when renew certificate, you could post it at here. We will help you narrow down it.

KyleXu-MSFT 25,866 Reputation points

2021-09-28T07:43:38.487+00:00

@Ryan Kohn

I am writing here to confirm with you any update about this thread now?
If you renew this certificate successfully, please be free to mark it as an answer for helping more people.
Ryan Kohn 1 Reputation point

2021-09-28T12:00:08.553+00:00

No, I have not renewed the certificate yet. I will update when I get that done.
KyleXu-MSFT 25,866 Reputation points

2021-10-04T08:37:48.86+00:00

Can you renew the certificate successfully? If you get error when renew certificate, you could post it at here. We will help you narrow down it.

Answer 1

Tasadduq Burney 7,506 MVP

Hello @Ryan Kohn !

Hope you are having a great day!

Thank you for asking a Question! We are Glad to Assist you!.

If the federation certificate has already expired, you need to remove all federated domains from the federation trust, and then remove and recreate the federation trust.
I am afraid, in your situation you will have to remove it and get it repalced.

Please go through the link mentioned below inorder to remove a federation trust.
https://learn.microsoft.com/en-us/exchange/remove-a-federation-trust-exchange-2013-help

After you have removed the Federation Trust, Visit the link mentioned below which explains how to renew the Federation Certificate :-
https://learn.microsoft.com/en-us/exchange/renew-the-federation-certificate-exchange-2013-help

Let me know if the above solution resolved your issue!

Regards,
Tasadduq Burney

__

|- Please don't forget to "Upvote" and "Accept as answer" if the reply is helpful -|

Ryan Kohn 1 Reputation point

2021-09-27T17:57:53.083+00:00

Will this have any user impact? Also, would you know why we are not experiencing any issues with it being expired?

Thank you
Tasadduq Burney 7,506 Reputation points MVP

2021-09-27T18:07:41.477+00:00
Hi Ryan!

As for the known user impact, it is as follows

Users Get an error when trying to search in Outlook.

Users get error when they try to Sync their calendar. Federation Cert and throw an error if one doesn't exist.
Example: https://techcommunity.microsoft.com/t5/exchange-team-blog/how-to-address-federation-trust-issues-in-hybrid-configuration/ba-p/1144285

Use of Certificate :-
he reason for needing to re-create the trust is due to the fact that the federation certificate is used to authenticate any changes to the federation – so once it expires you can’t make any changes and have to start from scratch.
Ryan Kohn 1 Reputation point

2021-09-27T18:41:19.16+00:00

Thank you very much for the explanation! I'll try to recreate sometime after hours. I appreciate it!

Ryan Kohn
Andy David - MVP 121.2K Reputation points MVP

2021-09-27T18:49:30.987+00:00

If you aren't in hybrid mode, then you probably wouldnt see any issues
Ryan Kohn 1 Reputation point

2021-09-27T18:51:03.507+00:00

We are in Hybrid mode but still not seeing any issues.
Andy David - MVP 121.2K Reputation points MVP

2021-09-27T18:52:43.533+00:00

Does free/busy work between the on-prem mailboxes and the 365 mailboxes? That should be failing if the cert is expired.
Ryan Kohn 1 Reputation point

2021-09-27T18:55:15.383+00:00

Yeah, that's the weird thing. Everything is working fine. If someone was seeing any issues with free/busy, believe me, we would hear about it!

Exchange Delegation Federation Certificate Expired

1 answer

Activity