How to Renew Exchange 2007 SSL Certificate

You will need to use PowerShell to generate or renew Exchange 2007 Certificate, and please refer to the following steps on how to renew Exchange 207 SSL Certificate
  1. Enter the following PowerShell in Exchange Management Shell to generate a new Exchange 2007 certificate request – Subject Alternative Name (SNA) for Autodiscover & Mail must be included
  2. Login to https://MAD01/certsrv(The Internal Certificate Authority (CA) Server) with your domain Administrator & Password
  3. Click Request a Certificate
  4. renew-ex07-01

  5. Click Advance Certificate Request
  6. renew-ex07-02

  7. Open C:\CertRequestEnvictus.txt (The Certificate Request file) with notepad, and copy all the contents
  8. renew-ex07-03

  9. Paste it to Saved Request: and Select Web Server in the Certificate Template
  10. renew-ex07-04

  11. Select Base 64 encoded and click Download Certificate to save it to C:\MonsterBean.cer
  12. renew-ex07-05

  13. Execute the following command in Exchange Management Shell to import the newly generated SSL Certificate to assign it to IIS Services
Using GUI to generate / Renew SSL Certification only available in Exchange 2010 and above, and since the extended support will be ended by 11 April 2017. It is strongly recommended to start planning to migrate to Exchange 2013/2016
Share This