Remove exchange certificate that is not the default smtp certificate

Question

Remove exchange certificate that is not the default smtp certificate

jeff mcnabney 301

Ex 2016 has a fqdn 3rd party SSL cert with services iis/pop/imap/smtp (cert1) and also another certificate with pop/imap/smtp from local CA (cert2) that expires in a year but that i want to remove from the server. I believe the command Get-ExchangeCertificate -domainname fqdn will return the ORDER in which exchange will use the certs. If cert1 appears at the top of the list, then i can expect that if i remove cert2 none of the services should be affected? Is this correct?

Answer 1

Aaron Xue-MSFT 2,576 Microsoft Vendor

Hi @jeff mcnabney ,

So you are now using the cert1(3rd party SSL) in Exchange server 2016.

You can't remove the certificate that's being used. And the cert2 is unused right?

In that case you can remove the old one.

Here’s a document for you reference.
Remove-ExchangeCertificate (ExchangePowerShell) | Microsoft Learn

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Aaron Xue-MSFT 2,576 Reputation points Microsoft Vendor

2022-02-08T09:40:24.673+00:00

Hi @jeff mcnabney ,

It's been a while, is there any update?

If the above suggestion helps, please click “Accept as answer” to mark helpful reply as an answer. Your action would be helpful to other users who encounter the same issue and read this thread.
jeff mcnabney 301 Reputation points

2022-02-08T15:56:39.6+00:00

The 3rd party cert is currently pending for renewal. I will not remove the on-prem CA cert until the 3rd party has been renewed and services are assigned.
Aaron Xue-MSFT 2,576 Reputation points Microsoft Vendor

2022-02-09T09:16:47.417+00:00

Hi @jeff mcnabney ,

That's ok.

You could totally remove the cert until the 3rd party cert has been renewd.
Aaron Xue-MSFT 2,576 Reputation points Microsoft Vendor

2022-02-15T08:47:29.753+00:00

Hi @jeff mcnabney ,

It's been a while, is there any update?

If the above suggestion helps, please click “Accept as answer” to mark helpful reply as an answer. Your action would be helpful to other users who encounter the same issue and read this thread.

Thanks for your understanding.

Remove exchange certificate that is not the default smtp certificate

0 additional answers

Activity