Blog Post

Exchange Team Blog
10 MIN READ

TLS Certificates in Exchange Hybrid - Common Issues & How to Fix them

The_Exchange_Team's avatar
The_Exchange_Team
Platinum Contributor
Jun 04, 2025
Overview of Hybrid Mail Flow The Hybrid deployment between Exchange Server (on-premises) and Exchange Online provides secure mail routing between on-premises and Exchange Online organization with t...
Updated Jun 13, 2025
Version 3.0
exchange 2016
exchange 2019
exchange online
hybrid
protocols
tips 'n tricks
transport
troubleshooting
FireStormZ's avatar
FireStormZ
Copper Contributor
Jun 23, 2025

What about expired federation certificates? I renewed the federation certificate but I can't delete the old one on the servers because after deleting they are automatically installed again

  • Bhalchandra_Atre-MSFT's avatar
    Bhalchandra_Atre-MSFT
    Icon for Microsoft rankMicrosoft
    Jun 24, 2025

    Please follow all the steps here to renew the federation certificate

    • FireStormZ's avatar
      FireStormZ
      Copper Contributor
      Jun 24, 2025

      I have already renewed my federation certificate. Now I have a valid and expired certificate that needs to be removed.

      • Josh_Hagen's avatar
        Josh_Hagen
        Icon for Microsoft rankMicrosoft
        Jun 24, 2025

        This is usually caused by the FederationTrust showing your old Thumbprint, for your expired certificate, and is something that can only be adjusted by clearing the thumbprint on the ADObject as you cannot currently do this through Exchange Management Shell. If you have questions about this or would like an engineer to walk you through the process I would advise opening up a support ticket.