1. Identify current cert thumbprint
- Type URL use web (OWA) > Click on lock key > View Cert > Capture the Thumbprint
2. Login to server CAS/HUB to check on services running use this Cert:
- Open PowerShell and run this Command :
get-ExchangeCertificate |fl
- To Specific to one cert if have many cert register :
get-ExchangeCertificate -Thumbprint (Thumbprint Number); |fl
*** Check services running for that Cert
3. Import New Cert user Command powershell OR MMC Console
Import-ExchangeCertificate -Path C:\newcert.cer|
OR
4. Identify Thumbprint for the new cert at MMC Console by "Expiring Date"
5. If your Exchange use more that 1 CAS/HUB please export with private key and export to other CAS/HUB
6. Active new cert with services use powershell :
Enable-ExchangeCertificate -Thumbprint (New Thumbprint Number) -Services "SMTP, IMAP, IIS, POP"
7. Use same command activation for other CAS/HUB
8. For Revert back the old Cert :
Enable-ExchangeCertificate -Thumbprint (Old Thumbprint Number) -Services "SMTP, IMAP, IIS, POP"