Renewing Commercial certificate on Exchange 2016-19
Renewing Commercial certificate on Exchange 2016-19
To check certificates in A1
- Login to support.apoyar.net
- Go to CMDB
- Power search
- Type SSL and hit enter
- Click on Apoyar certificate store
Here will get the list of certificates
To renew on exchange server
- Login to exchange.wise.apoyar
- Open exchange admin centre
- Go to servers
- Click on certificates
Will get here list of certificates, there are 2 types of certificates
Self-signed - free one
Commercial – need to buy
For exchange we are using commercial one
From the above list, click on exchange, will get all details of exchange certificate
- Click on renew
- Enter the UNC path of fullchain by copying from file explorer
- Click on OK
Then
- login to secureserver.net
- SSL
- Go to WG, click on manage
New window will open for zeus.wise-geary.co.uk
- Under certificates, open Re-key your certificate
- Open our generated certificate fullchain key
- Paste under CSR
- Click on “Add Changes”
- Click on “Submit All Changes”
It will take 5-10 min to take effect, then will receive an email about our new requested certificate (we receive a zip file)
To be on safe side, we can import all generated certificate files in certificate store on server
- Open Microsoft management console on exchange server
- Click on file
- Click on add/remove snap
- Choose certificate
- Click add
- It will give popup, asking what certificate is for
- Select here computer account
- Click on next
- Select local computer
- Click finish
- Click OK
Once done, will get all certificates here
- Right click on trusted root certificate authority
- Choose all tasks
- Click import
- Click next
- Select here that generated certificate
- Click on open
Now we have another certificate to import
- Go to exchange admin center
- Servers
- Certificates
- Click on import, select certificate and import
Once import done
- Click on imported certificate
- Click on edit
- Click on services
- Only tick SMTP, POP, IMAP, and IIS.
- Click on save
So after this, sometimes need to restart exchange server.