Forum Discussion

Copper Contributor

Jun 01, 2023

A couple of issues after Migrating to Exchange 2019

I migrated a server from Exchange 2010 to Exchange 2019 this weekend. I currently have two issues I need assistance with. This is the first Exchange 2019 server that I have worked on and with the S...

Exchange Server

Andres-Bohren

Steel Contributor

Jun 02, 2023

Hi tesla1886

I understand you have a working certificate on one Server (probably the public certificate) and want it to transfer to another Server.

On the working Server export the Certificate (from the Local Computer Certificate Store) to a PFX File with a Password including the private Key

Copy the PFX File to the new Server open Local Computer Certificate Store (certlm.msc) and import the PFX.

Make sure you have the Root Certificate and Intermediate Certificates from your certificate in the appropriate stores.
Then use Get-ExchangeCertificate and Enable-ExchangeCertificate to enable them in Exchange.

Regards

Andres

tesla1886

Copper Contributor

Jun 02, 2023

Andres-Bohren
I didn't intend to transfer the certificate from the old server to the new one. I intended to rekey and replace it. I just don't know what the full process is and can't not find anything to tell me.

Andres-Bohren
Steel Contributor
Jun 04, 2023
Hi tesla1886

If you have a new Certificate with the current Private Key
https://www.entrust.com/de/knowledgebase/ssl/what-are-the-steps-to-recover-the-private-key-of-an-ssl-certificate-in-an-iis-environment
Import Certificate into Certificate Store
certutil –repairstore my <serial number>

If you have a new private Key then you made a new CSR?
You should see a pending Request in "Certificate Enrollment Request" of your Cert Store
https://blog.icewolf.ch/archive/2014/09/24/create-san-csr-with-certutil/
#Install the certificate with certutil
certreq -accept -machine C:\Install\test.cer

Regards
Andres