7,925 questions
Hi there, I always recommend starting from Exchange and creating the renewal/request from there - its so much cleaner!
Can I renew the Exchange Certificate (SSL) without using a REQ file?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(307.2, 28.999999999999996%, 39%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECJ%3C/text%3E%3C/svg%3E)
Catherine Jaszewski
716
Reputation points
Our certificate authority sent us a .CRT file to use for renewing our Exchange 2019 Certificate (without a Certificate Request - .REQ file). When I click on the Renew link in Exchange Admin Center (EAC) it created a REQ file. Do I need to wait for the REQ file to be processed (using the CER file from the request)? I tried to use the .CRT file (actually copied this to a CER file as that is what the Complete Request is looking for) from the renewal our CA sent us. I am not getting any errors but I cannot export the certificate (to import it to our other Exchange Servers). My thinking is I need the CER file from the REQ file to complete the Pending Request. Am I correct in my thinking?
Please advise.
Thank you,
Exchange | Exchange Server | Management
Accepted answer
-
Andy David - MVP 157.8K Reputation points2021-10-07T13:44:13.88+00:00 -
Catherine Jaszewski 716 Reputation points
2021-10-07T13:58:23.227+00:00 I agree...
Thank you again for all your help and advise.
It is greatly appreciated!
Sign in to comment -
1 additional answer
Sort by: Most helpful
-
Andy David - MVP 157.8K Reputation points
2021-10-07T13:03:22.637+00:00 Yes, create the request from Exchange, submit to your CA, Import that back to the server that requested it, then export with the private key as a pfx with a password and then you can import to any other Exchange Server when you provide the password.
-
Catherine Jaszewski 716 Reputation points
2021-10-07T13:22:32.49+00:00 Hi Andy!
So good to hear from you!I kind of figured we need to use the CER file that comes from the REQ file. However, we received the CRT file from our CA before we sent a REQ...Meaning he simply renewed the certificate and sent us a CRT .
Do you know if there is a work around...Or a way to fool the Exchange renewal process...And use the CRT\CER file without the processing the REQ? Or are we better off getting the REQ fulfilled and using the CER produced from the request.
Please advise.
Thank you,
Sign in to comment -