We have two Exchange 2013 servers in a fail-over cluster and DAG. Both servers are mailbox and CAS. The servers use different certificates for the 4 services (IMAP, POP, IIS, SMTP). Server1 is the primary.
Now both servers, this certificate is going to expire soon. I have done renewal of certificate for Server2, completed it in Exchange certificate screen and the new certificate got installed.
But I see only IMAP and POP is showing in new certificate->services. Old certificate still showing all four services. Should I just select other two services in the new certificate, and will that take it off from the old one? What if both old and new ones have all 4 services – can I then just delete the old certificate? I can't unselect any of 4 services from old cert, the boxes are greyed out.
My second question is, should I do the same thing on my primary server Server1 (renewal of certificate and moving the services and delete old one later)?
Much appreciate your advice.