Exchange Certificate Renewal

Joshua Thompson 171 Reputation points
2020-11-23T14:26:15.59+00:00

My existing Exchange certificate is about to expire so I renewed it using the EAC console. I sent the CA request to my CA provider, got the cert, completed the cert request on my server and now I have TWO Exchange SMTP certificates for the same domain. one that expires shortly and then the renewed one. Both have SMTP services assigned to it.

When the first cert expires will it automatically roll over and start using the renewed certificate?

Microsoft Exchange Online Management
Microsoft Exchange Online Management
Microsoft Exchange Online: A Microsoft email and calendaring hosted service.Management: The act or process of organizing, handling, directing or controlling something.
4,781 questions
Exchange Server Management
Exchange Server Management
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Management: The act or process of organizing, handling, directing or controlling something.
7,816 questions
0 comments No comments
{count} votes

Accepted answer
  1. Andy David - MVP 153.3K Reputation points MVP
    2020-11-23T15:40:15.44+00:00

    Its probably using the newer one now if its the same subject names and enabled for SMTP services.
    Check with protocol logging:

    https://learn.microsoft.com/en-us/exchange/mail-flow/connectors/configure-protocol-logging?view=exchserver-2019

    After its enabled - if not already- look through the logs at the SMTP conversations.
    They will show what cert is being used by the thumbprint.


0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.