As a part of Microsoft's Secure Future Initiative (SFI), security remains our top priority. In alignment with SFI, Exchange Server is implementing several changes to enhance the security of Exchange ...
Updated Aug 11, 2025
Version 11.0
Blog Post
Where is the script to remove the organization certificate from the shared 'Office 365 Exchange Online' application? The documentation points me to Service Principal Clean-Up Mode section, but I do not see a script for me to download and run. The document says to use this script .\ConfigureExchangeHybridApplication.ps1 -ResetFirstPartyServicePrincipalKeyCredentials - but where is the script ConfigureExchangeHybridApplication.ps1??
I have installed the April 2025 HU1 on my on-prem Exchange 2019 CU15 servers and we do not require the rich coexistence, so all I need to do is run the powershell script to remove the org certificate right? Also, when I look in Entra Id under applications I do not see an application named 'Office 365 Exchange Online'. Should I?
- LukasSMSFT
Microsoft
You can find the script here: https://aka.ms/ConfigureExchangeHybridApplication
Thank you.
I have installed the April 2025 HU1 on my on-prem Exchange 2019 CU15 servers and we do not require the rich coexistence, so all I need to do is run the powershell script to remove the org certificate right?
Also, when I look in Entra Id under applications I do not see an application named 'Office 365 Exchange Online'. Should I?
- Nino_Bilic
Was HCW ever run for this tenant? You might not need to run the script, but if you can just run it in the clean up mode and it will do the right thing, if you are not certain.
