Quickly update self signed Exchange certificates

We have several customers who use self signed certificates for their Exchange SBS servers and I wanted to share a quick easy way to update expired certificates.

First you can get a list of all certificates using Get-ExchangeCertificate

Then when you have the certificate you need to replace copy the thumbprint and issue the following command.

Get-ExchangeCertificate -Thumbprint <the thumbprint> | New-ExchangeCertificate

Once you are sure it is installed and working you can remove the old expired cert with

Remove-ExchangeCertificate -Thumbprint <the thumbprint>

This process makes it a bit easier since it retains all the information you need that already existed in the old cert.

No comments:

Post a Comment