Share via

Can I renew the Exchange Certificate (SSL) without using a REQ file?

Catherine Jaszewski 721 Reputation points
2021-10-07T12:43:32.523+00:00

Our certificate authority sent us a .CRT file to use for renewing our Exchange 2019 Certificate (without a Certificate Request - .REQ file). When I click on the Renew link in Exchange Admin Center (EAC) it created a REQ file. Do I need to wait for the REQ file to be processed (using the CER file from the request)? I tried to use the .CRT file (actually copied this to a CER file as that is what the Complete Request is looking for) from the renewal our CA sent us. I am not getting any errors but I cannot export the certificate (to import it to our other Exchange Servers). My thinking is I need the CER file from the REQ file to complete the Pending Request. Am I correct in my thinking?

Please advise.

Thank you,

Exchange | Exchange Server | Management
Exchange | Exchange Server | Management
The administration and maintenance of Microsoft Exchange Server to ensure secure, reliable, and efficient email and collaboration services across an organization.
0 comments
Answer accepted by question author
  1. Andy David - MVP 159.8K Reputation points MVP Volunteer Moderator
    2021-10-07T13:44:13.88+00:00

    Hi there, I always recommend starting from Exchange and creating the renewal/request from there - its so much cleaner!

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Andy David - MVP 159.8K Reputation points MVP Volunteer Moderator
    2021-10-07T13:03:22.637+00:00

    Yes, create the request from Exchange, submit to your CA, Import that back to the server that requested it, then export with the private key as a pfx with a password and then you can import to any other Exchange Server when you provide the password.

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.