How to renew Self signed Certificate (Exchange 2016) Which is Assigned to services IMAP, POP, SMTP

Question

Hello All

My Current Infra

1-Primary Domain Controller
1-Secondary Domain Controller + File Server

2-RODC

1. UK-RODC
2. Dubai-RODC (Powered Off) No more Office

2 Child Domain

1 Exchange Server 2016 (CU21)
DB01
DB02

Self signed Certificate (Exchange 2016) is going to expire in 20/11/2021 which is connect outlook and mobile

Can you guide me how to renew Self signed Certificate (Exchange 2016) Which is Assigned to services IMAP, POP, SMTP without impact -Step by Step

How to backup certificate this settings without impact in case of restore ?

Answer 1

Follow my steps here:

For the Cert called "Microsoft Exchange", you can follow these steps from my blog:
https://ehloergosum.com/2020/01/25/renewing-that-pesky-microsoft-exchange-certificate/

for 2) )Microsoft Exchange Server Auth Certificate, this is a good step by step:
https://supertechman.com.au/how-to-renew-an-expired-microsoft-exchange-server-auth-certificate/

and the official doc:

https://learn.microsoft.com/en-us/exchange/architecture/client-access/renew-certificates?view=exchserver-2019#:~:text=Use%20the%20EAC%20to%20renew%20an%20Exchange%20self%2Dsigned%20certificate&text=from%20the%20list.-,Select%20the%20certificate%20that%20you%20want%20to%20renew%2C%20and%20then,to%2C%20and%20then%20click%20OK.