Should I Overwrite The Default Exchange SMTP Certificate?
When adding a TLS certificate on an Exchange server, the inevitable prompt will appear to enquire if you wish to overwrite the default SMTP certificate binding. While the UI in …
Certificates
Exchange Managed Availability Error – OutlookRpcSelfTestProbe
This case illustrates the "fun" with Managed Availability a particular customer had after making changes to their servers. The servers were built back in 2014, and as such the default …
A Tale of Two Certificates–SHA1 Certificate Created During Exchange 2016 Installation
The security space is constantly evolving, and while a lot of the recent work has been on moving to TLS 1.2, a previous focus in the industry was to stop …
Exchange Setup – Certificate Is Expired – Part Deux
Previously I managed to break one of my labs when replicating a customer situation and then had to fix it as noted in this post from 2017.
This time …
Easy Way To Retrieve Certificate Thumbprint Using PowerShell
Since many certificate operations involve knowing the certificate's thumbprint, it is always useful to to have an easy way to get this information. In some of the online documentation it …
Exchange Self Signed SHA2 Certificates
In recent builds, Exchange has been updated to support the newer SHA2 certificates. Exchange 2010 SP3 RU13 and Exchange 2013 CU 12 updated the SMIME control's certificate to SHA2.
Additionally, …
Assigning Exchange 2016 and 2013 Certificate To Multiple Servers At The Same Time
In Exchange 2010, the Exchange Management Console allowed us to import certificates to multiple servers and to then assign the certificate to multiple servers simultaneously. In the Exchange 2013 and …
Renewing Exchange 2010 Certificate Using Exchange Management Console
Renewing certificates breaks down into the following main sections
- Create Certificate Signing Request
- Send Certificate Signing Request to the Certification Authourity to be signed
- Complete Certificate Signing Request
- Install certificate
Important Upcoming Certificate Changes
Please be aware that there is a pending change for the minimum key length for certificates with RSA keys. The private keys used in these certificates can be derived and …
Custom Certificate Template Cannot be Issued
At an engagement yesterday, I ran into an interesting issue where a custom certificate template that was created was unavailable from the Certificate Services Web Enrolment page.
One quick peek …