Exchange 2007 SSL certificate installation

Tony WONG · Joined: 28 Sep 2007 Posts: 24

i cannot install the SSL cert, my steps are

1. new-exchangeCertificate - OK, i see the thumbprint by
get-exchangecertificate
2. send thumbprint to CA and return cer files -OK
3, import-exchangecertificate - thumbprint not print on screen, i cannot
find the thumbprint by get-exchangecertificate
4. enable-exchangecertificate - i got this error, it can find thumbprint but
SigningNotSupported

when i new-exchangecertficate, i saved it at c:\certificate.cer. then i
moved to a new folder c:\exchange2007_cert\certificate.cer. then i copied
CA cert to c:\exchange2007_cert\cer0001234.cer and import accordingly.

Now i cannot see the cert by get-exchangecertificate

what's wrong?

Thanks a lot.

tony

Archived from group: microsoft>public>exchange>setup

Matteo Cilloni · Joined: 05 Aug 2007 Posts: 10

Hi,
you can find all detailed steps to install a valid certificate on Exchange
Management Console, click Microsoft Exchange, on the top on left side, and
in the right panel you will find some link , one is "configure SSL for your
CAS" , following this link you can find hot to installa a valid ssl
certificate.

"Tony WONG" wrote in message $jZIHA.5984@TK2MSFTNGP06.phx.gbl...
>i cannot install the SSL cert, my steps are
>
> 1. new-exchangeCertificate - OK, i see the thumbprint by
> get-exchangecertificate
> 2. send thumbprint to CA and return cer files -OK
> 3, import-exchangecertificate - thumbprint not print on screen, i cannot
> find the thumbprint by get-exchangecertificate
> 4. enable-exchangecertificate - i got this error, it can find thumbprint
> but SigningNotSupported
>
> when i new-exchangecertficate, i saved it at c:\certificate.cer. then i
> moved to a new folder c:\exchange2007_cert\certificate.cer. then i copied
> CA cert to c:\exchange2007_cert\cer0001234.cer and import accordingly.
>
> Now i cannot see the cert by get-exchangecertificate
>
> what's wrong?
>
> Thanks a lot.
>
> tony
>

Tony WONG · Joined: 28 Sep 2007 Posts: 24

Hi Matteo

My problem is that i should fail to import the 3rd key to Exchange 2007

i cannot see the cert at get-exchangecertificate

but i can see the cert at MMC, cert

any further steps i can do? Thanks

Tony

"Matteo Cilloni" ¼¶¼g©ó¶l¥ó·s»D:eBuJW0jcIHA.148@TK2MSFTNGP04.phx.gbl...
> Hi,
> you can find all detailed steps to install a valid certificate on Exchange
> Management Console, click Microsoft Exchange, on the top on left side, and
> in the right panel you will find some link , one is "configure SSL for
> your CAS" , following this link you can find hot to installa a valid ssl
> certificate.
>
> "Tony WONG" wrote in message
> $jZIHA.5984@TK2MSFTNGP06.phx.gbl...
>>i cannot install the SSL cert, my steps are
>>
>> 1. new-exchangeCertificate - OK, i see the thumbprint by
>> get-exchangecertificate
>> 2. send thumbprint to CA and return cer files -OK
>> 3, import-exchangecertificate - thumbprint not print on screen, i cannot
>> find the thumbprint by get-exchangecertificate
>> 4. enable-exchangecertificate - i got this error, it can find thumbprint
>> but SigningNotSupported
>>
>> when i new-exchangecertficate, i saved it at c:\certificate.cer. then i
>> moved to a new folder c:\exchange2007_cert\certificate.cer. then i
>> copied CA cert to c:\exchange2007_cert\cer0001234.cer and import
>> accordingly.
>>
>> Now i cannot see the cert by get-exchangecertificate
>>
>> what's wrong?
>>
>> Thanks a lot.
>>
>> tony
>>
>
>

Matteo Cilloni · Joined: 05 Aug 2007 Posts: 10

when you use new-exchangeCertificate to create request do you specify
"-privatekeyexportable:$true -force" option? if you didn`t use those option
try to crate a new request using
"-privatekeyexportable:$true -force" , in my case solved the problem..

"Tony WONG" wrote in message @TK2MSFTNGP02.phx.gbl...
> Hi Matteo
>
> My problem is that i should fail to import the 3rd key to Exchange 2007
>
> i cannot see the cert at get-exchangecertificate
>
> but i can see the cert at MMC, cert
>
> any further steps i can do? Thanks
>
> Tony
>
>
> "Matteo Cilloni"
> ¼¶¼g©ó¶l¥ó·s»D:eBuJW0jcIHA.148@TK2MSFTNGP04.phx.gbl...
>> Hi,
>> you can find all detailed steps to install a valid certificate on
>> Exchange Management Console, click Microsoft Exchange, on the top on left
>> side, and in the right panel you will find some link , one is "configure
>> SSL for your CAS" , following this link you can find hot to installa a
>> valid ssl certificate.
>>
>> "Tony WONG" wrote in message
>> $jZIHA.5984@TK2MSFTNGP06.phx.gbl...
>>>i cannot install the SSL cert, my steps are
>>>
>>> 1. new-exchangeCertificate - OK, i see the thumbprint by
>>> get-exchangecertificate
>>> 2. send thumbprint to CA and return cer files -OK
>>> 3, import-exchangecertificate - thumbprint not print on screen, i cannot
>>> find the thumbprint by get-exchangecertificate
>>> 4. enable-exchangecertificate - i got this error, it can find thumbprint
>>> but SigningNotSupported
>>>
>>> when i new-exchangecertficate, i saved it at c:\certificate.cer. then i
>>> moved to a new folder c:\exchange2007_cert\certificate.cer. then i
>>> copied CA cert to c:\exchange2007_cert\cer0001234.cer and import
>>> accordingly.
>>>
>>> Now i cannot see the cert by get-exchangecertificate
>>>
>>> what's wrong?
>>>
>>> Thanks a lot.
>>>
>>> tony
>>>
>>
>>
>
>

Exchange 2007 certificate error with Outlook 2007 This is a problem I have seen MANY people having but I've yet to see a definitive answer. Having set up a new Exchange 2007 server for a customer they purchased a new SSL certificate which has been installed in IIS. They have some external users who use O

Exchange 2007-Outlook 2007 Certificate Requirements Hi, Can someone confirm what the Certificate requirements are for Exchange 2007 CAS servers and Outlook 2007 clients i.e. where do certs have to be installed and for what purpose. I understand that a cert would be required for OWA or Outlook Anywhere, but

Exchange 2007 & SSL certificate Dear All My Exchange server name is different from FQDN i have bought a SSL certificate with FQDN name i wish to use the cert in OWA, Mobile 6 and Outlook Anywhere. other than buy a multi-name cert, is there any other solution? Question 1. Can i rename th

SSL Certificate Migration to Exchange 2007 Hi, Currently we have FE/BE Ex2003 config and support Outlook (mainly 2003), ActiveSync, OWA, RPC(HTTPS) and LDAP. The FE (NLB cluster) has a certificate for mail.domain (NLB address) and this is the address used for internal and external access. The plan

Exchange 2007 Self generated SSL certificate Hi, Exchange 2007 has, on install, generated it's own SSL certificate. This has a few problems that I can't find a way around: 1) When Outlook 2007 clients connect, I keep having to click 'Yes' through a Security Alert which indicates that the name on the