2

I have some SSL certificates problem.

We have an Exchange 2010 server hosting mailboxes for mydomain.com, otherdomain.com and thirddomain.com. It's internal name is myserver.mydomain.local.

When setup, it came with its self-signed certificate on the name "myserver".

We already have an SSL certificate for mail.mydomain.com (containing the SAN mydomain.com), and want to use it so everyone will connect to OWA / Activesync / Outlook Anywhere etc. using the url : mail.mydomain.com.

The only resources I find searching the web are telling me to create a certificate request using the Exchange MMC, then forward it to the CA to issue a new certificate then complete the request on the Exchange server.

But how can I re-use our existing certificate ? It is fine, it has already the good server names in it, we don't want to re-pay for a new certificate ! (also we should pay for revoking the old one before a new one could be issued).

2

Just install the certificate (with private key) on the Exchange Server in the Computer's Personal Store. Then you can select it in Exchange

  • 2
    You pointed me the right way : "with private key". I had two separate files for certificate and private key. I merged then using openssl command line (see [security.stackexchange.com/questions/25996/…), and then I was able to import it into Exchange MMC and use it for the services. Now that's right ! – Sierramike Apr 15 '14 at 13:08

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.