Renewing Commercial certificate on Exchange 2016-19

Renewing Commercial certificate on Exchange 2016-19

---

To check certificates in A1

- Login to support.apoyar.net

- Go to CMDB

- Power search

- Type SSL and hit enter

- Click on Apoyar certificate store

Here will get the list of certificates

To renew on exchange server

---

- Login to exchange.wise.apoyar

- Open exchange admin centre

- Go to servers

- Click on certificates

Will get here list of certificates, there are 2 types of certificates

Self-signed - free one

Commercial – need to buy

For exchange we are using commercial one

From the above list, click on exchange, will get all details of exchange certificate

- Click on renew

- Enter the UNC path of fullchain by copying from file explorer

- Click on OK

Then

- login to secureserver.net

- SSL

- Go to WG, click on manage

New window will open for zeus.wise-geary.co.uk

- Under certificates, open Re-key your certificate

- Open our generated certificate fullchain key

- Paste under CSR

- Click on “Add Changes”

- Click on “Submit All Changes”

It will take 5-10 min to take effect, then will receive an email about our new requested certificate (we receive a zip file)

To be on safe side, we can import all generated certificate files in certificate store on server

- Open Microsoft management console on exchange server

- Click on file

- Click on add/remove snap

- Choose certificate

- Click add

- It will give popup, asking what certificate is for

- Select here computer account

- Click on next

- Select local computer

- Click finish

- Click OK

Once done, will get all certificates here

- Right click on trusted root certificate authority

- Choose all tasks

- Click import

- Click next

- Select here that generated certificate

- Click on open

Now we have another certificate to import

- Go to exchange admin center

- Servers

- Certificates

- Click on import, select certificate and import

Once import done

- Click on imported certificate

- Click on edit

- Click on services

- Only tick SMTP, POP, IMAP, and IIS.

- Click on save

So after this, sometimes need to restart exchange server.