Can I renew the Exchange Certificate (SSL) without using a REQ file?

Catherine Jaszewski 716 Reputation points

Our certificate authority sent us a .CRT file to use for renewing our Exchange 2019 Certificate (without a Certificate Request - .REQ file). When I click on the Renew link in Exchange Admin Center (EAC) it created a REQ file. Do I need to wait for the REQ file to be processed (using the CER file from the request)? I tried to use the .CRT file (actually copied this to a CER file as that is what the Complete Request is looking for) from the renewal our CA sent us. I am not getting any errors but I cannot export the certificate (to import it to our other Exchange Servers). My thinking is I need the CER file from the REQ file to complete the Pending Request. Am I correct in my thinking?

Please advise.

Thank you,

Exchange Server Management
Exchange Server Management
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Management: The act or process of organizing, handling, directing or controlling something.
7,499 questions
0 comments No comments
{count} votes

Accepted answer
  1. Andy David - MVP 145.5K Reputation points MVP

    Hi there, I always recommend starting from Exchange and creating the renewal/request from there - its so much cleaner!

1 additional answer

Sort by: Most helpful
  1. Andy David - MVP 145.5K Reputation points MVP

    Yes, create the request from Exchange, submit to your CA, Import that back to the server that requested it, then export with the private key as a pfx with a password and then you can import to any other Exchange Server when you provide the password.