Forum Discussion
Cant set smtp tls certificate for send-connector
Hello, it's Ahmed and I will try to help
It looks like you are trying to assign a TLS certificate to a send connector in your Exchange Server 2016, but are encountering an error message that says the specified certificate is not enabled for the SMTP protocol.
To enable a certificate for the SMTP protocol, you can use the Enable-ExchangeCertificate cmdlet as you mentioned. However, it appears that the cmdlet is not having the desired effect in your case.
One possible reason for this could be that the certificate you are trying to use is not a valid SMTP certificate. To be used for the SMTP protocol, a certificate must meet certain requirements, such as being issued by a trusted certificate authority (CA) and being associated with the domain that you want to use it for.
It's also possible that the certificate has already been enabled for the SMTP protocol, in which case you will not see any success message when running the Enable-ExchangeCertificate cmdlet.
One way to verify that the certificate is enabled for the SMTP protocol is to check the Services property of the certificate. You can do this by running the following command:
Get-ExchangeCertificate -Thumbprint *example* | Select-Object Services
This should display a list of the services that the certificate is enabled for. If SMTP is included in this list, then the certificate is already enabled for the SMTP protocol, and you should be able to use it for your send connector.
If the certificate is not enabled for the SMTP protocol, you can try enabling it again using the Enable-ExchangeCertificate cmdlet, as shown in your example. Make sure to include the -Services SMTP parameter to specify that you want to enable the certificate for the SMTP protocol.
If you continue to have issues after trying these steps, it may be helpful to check the event logs on your Exchange Server for any error messages or other clues that might help to diagnose the problem. You can also try contacting Microsoft support or consulting the Exchange Server documentation for further assistance.
Please let me know the result 🙂
Hello Ahmed,
I have the same issue as lug-ms
I have two Exchange Server 2016 (CU23) in Hybrid Mode with O365. After renewing the certificate I cant assign it to the "Outbound to O365" Connector or any other Send-Connector. I got the same error:
I try to enable the certificate (thumbprint 7AEE6646B5F788B61A2101A928B141C59A1EFC08):
You see, the certificate is not activate for SMTP and trying to assign it to the Outbound-Connector throws the same error.
Another view to the certificates of the server:
Only the Federation-certificate is activated for SMTP.
But when I try to activate another certificate for SMTP, I get this warning:
Is this a problem of the german version of the exchange-server?
How can I activate then new certificate to a Send-Connector?
