Forum Discussion

Copper Contributor

Dec 17, 2020

Cant set smtp tls certificate for send-connector

I have an Exchange in Hybrid Mode with O365. After renewing the certificate (not self signed, its from sectigo) I cant assign it to SMTP, and therefore I cannot assign it to the "Outbound to O365" C...

Exchange Server

Dominik Hoefling

MVP

Dec 17, 2020

lug-ms you should run HCW version 17.x (newest) and let the agent do the job. Certificate replacement requires to re-run HCW and this should then work without any problem.

Copper Contributor

Dec 17, 2020

Dominik Hoefling
The hcw does the same thing in powershell, and fails with the same error, see attachment

Dominik Hoefling
MVP
Dec 17, 2020
lug-ms are there other certificates bound to the SMTP service? If you run Get-ExchangeCertificate you should see all thumbprints and services (S stands for SMTP).
- lug-ms
  Copper Contributor
  Dec 17, 2020
  Dominik Hoefling
  
  Yes, the federation certificate is bound to SMTP, which probably automatically happened when removing the old certificate from the server.
  You can see more details about the federation cert in my starting post 😉
  - Dominik Hoefling
    MVP
    Dec 17, 2020
    lug-ms I didn't understand it because you said the only certificate that has SMTP is the Federation certificate, but then you mentioned that enabling the smtp service on the new certificate has been successful. So this means there are two certificates with the SMTP service but the "real" one does not work for hybrid (error message), is this correct?
    
    If yes, you can disable the SMTP service for the federation certificate and the new certificate, then just enable it for the new certificate again with the same cmdlet. To disable the SMTP service, you can run Enable-ExchangeCertificate -Services None -Thumbprint XXX

Resources