Updating SSL Certificate

%3CLINGO-SUB%20id%3D%22lingo-sub-1989589%22%20slang%3D%22en-US%22%3EUpdating%20SSL%20Certificate%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1989589%22%20slang%3D%22en-US%22%3E%3CP%3EHello!%26nbsp%3B%20%26nbsp%3BI%20am%20trying%20to%20update%20our%20expiring%20SSL%20certificate%20and%20here%20is%20what%20I%20am%20following%20to%20do%20so%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ETo%20Install%20an%20Intermediate%20Certificate%20in%20Microsoft%20Exchange%20Server%202016%3C%2FP%3E%3COL%3E%3CLI%3EClick%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3EStart%3C%2FSTRONG%3E%2C%20and%20then%20click%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3ERun...%3C%2FSTRONG%3E.%3C%2FLI%3E%3CLI%3EType%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3Emmc%3C%2FSTRONG%3E%2C%20and%20then%20click%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3EOK%3C%2FSTRONG%3E.%20The%20Microsoft%20Management%20Console%20(Console1)%20window%20opens.%3C%2FLI%3E%3CLI%3EIn%20the%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3EConsole1%3C%2FSTRONG%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3Ewindow%2C%20click%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3EFile%3C%2FSTRONG%3E%2C%20and%20then%20select%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3EAdd%2FRemove%20Snap-in%3C%2FSTRONG%3E.%3C%2FLI%3E%3CLI%3EIn%20the%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3EAdd%20or%20Remove%20Snap-ins%3C%2FSTRONG%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3Ewindow%2C%20select%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3ECertificates%3C%2FSTRONG%3E%2C%20and%20then%20click%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3EAdd%3C%2FSTRONG%3E.%3C%2FLI%3E%3CLI%3EIn%20the%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3EComputer%20Account%3C%2FSTRONG%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3Ewindow%2C%20select%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3EComputer%20Account%3C%2FSTRONG%3E%2C%20and%20then%20click%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3ENext%3C%2FSTRONG%3E.%3C%2FLI%3E%3CLI%3EIn%20the%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3ESelect%20Computer%3C%2FSTRONG%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3Ewindow%2C%20select%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3ELocal%20Computer%3C%2FSTRONG%3E%2C%20and%20then%20click%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3EFinish%3C%2FSTRONG%3E.%3C%2FLI%3E%3CLI%3EIn%20the%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3EAdd%20or%20Remove%20Snap-ins%3C%2FSTRONG%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3Ewindow%2C%20click%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3EOK%3C%2FSTRONG%3E.%3C%2FLI%3E%3CLI%3EIn%20the%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3EConsole1%3C%2FSTRONG%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3Ewindow%2C%20click%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3E%2B%3C%2FSTRONG%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3Eto%20expand%20the%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3ECertificates%20(Local%20Computer)%3C%2FSTRONG%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3Efolder%20on%20the%20left.%3C%2FLI%3E%3CLI%3ERight-click%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3EIntermediate%20Certification%20Authorities%3C%2FSTRONG%3E%2C%20mouse%20over%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3EAll%20Tasks%3C%2FSTRONG%3E%2C%20and%20then%20click%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3EImport%3C%2FSTRONG%3E.%3C%2FLI%3E%3CLI%3EIn%20the%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3ECertificate%20Import%20Wizard%3C%2FSTRONG%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3Ewindow%2C%20click%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3ENext%3C%2FSTRONG%3E.%3C%2FLI%3E%3CLI%3EClick%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3EBrowse%3C%2FSTRONG%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3Eto%20find%20the%20intermediate%20certificate%20file.%3C%2FLI%3E%3CLI%3EIn%20the%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3EOpen%3C%2FSTRONG%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3Ewindow%2C%20change%20the%20file%20extension%20filter%20to%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3EPKCS%20%237%20Certificates%20(*.spc%3B*.p7b)%3C%2FSTRONG%3E%2C%20select%20the%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3E*_iis_intermediates.p7b%3C%2FSTRONG%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3Efile%2C%20and%20then%20click%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3EOpen%3C%2FSTRONG%3E.%3C%2FLI%3E%3CLI%3EIn%20the%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3ECertificate%20Import%20Wizard%3C%2FSTRONG%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3Ewindow%2C%20click%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3ENext%3C%2FSTRONG%3E.%3C%2FLI%3E%3CLI%3ESelect%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3EPlace%20all%20certificates%20in%20the%20following%20store%3C%2FSTRONG%3E%2C%20and%20then%20click%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3EBrowse%3C%2FSTRONG%3E.%3C%2FLI%3E%3CLI%3EIn%20the%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3ESelect%20Certificate%20Store%3C%2FSTRONG%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3Ewindow%2C%20select%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3EIntermediate%20Certification%20Authorities%3C%2FSTRONG%3E%2C%20and%20then%20click%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3EOK%3C%2FSTRONG%3E.%3C%2FLI%3E%3CLI%3EIn%20the%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3ECertificate%20Import%20Wizard%3C%2FSTRONG%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3Ewindow%2C%20click%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3ENext%3C%2FSTRONG%3E.%3C%2FLI%3E%3CLI%3EClick%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3EFinish%3C%2FSTRONG%3E.%3C%2FLI%3E%3CLI%3EClick%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3EOK%3C%2FSTRONG%3E.%3C%2FLI%3E%3CLI%3EClose%20the%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3EConsole1%3C%2FSTRONG%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3Ewindow%2C%20and%20then%20click%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3ENo%3C%2FSTRONG%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3Eto%20remove%20the%20console%20settings.%3C%2FLI%3E%3C%2FOL%3E%3COL%3E%3CLI%3ETo%20Install%20an%20SSL%20Certificate%20in%20Microsoft%20Exchange%20Server%202016%3COL%3E%3CLI%3ELog%20in%20to%20the%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3EExchange%20Admin%20Center%3C%2FSTRONG%3E.%3C%2FLI%3E%3CLI%3EFrom%20the%20left%20menu%2C%20select%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3EServers%3C%2FSTRONG%3E%2C%20and%20then%20click%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3ECertificates%3C%2FSTRONG%3E.%3C%2FLI%3E%3CLI%3ESelect%20your%20certificate%20(it%20has%20a%20%E2%80%9CPending%20request%E2%80%9D%20status)%2C%20and%20then%20click%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3EComplete%3C%2FSTRONG%3E.%3C%2FLI%3E%3C%2FOL%3E%3C%2FLI%3E%3CLI%3EFor%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3EFile%20to%20import%20from%3C%2FSTRONG%3E%2C%20enter%20the%20certificate%20file%20path%20we%20provided%20(such%20as%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CEM%3E%5C%5Cserver%5Cfolder%5Ccoolexample.crt%3C%2FEM%3E)%2C%20and%20then%20click%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3EOK%3C%2FSTRONG%3E.%20Exchange%20installs%20your%20certificate.%3C%2FLI%3E%3CLI%3EIn%20the%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3ECertificates%3C%2FSTRONG%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3Esection%2C%20select%20your%20certificate%20again%20(the%20status%20changed%20to%20%E2%80%9CValid%E2%80%9D)%2C%20and%20then%20click%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3EEdit%3C%2FSTRONG%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E(pencil%20icon).%3C%2FLI%3E%3CLI%3EClick%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3EServices%3C%2FSTRONG%3E%2C%20select%20the%20services%20to%20which%20the%20certificate%20applies%20(SMTP%2C%20UM%2C%20UM%20call%20router%2C%20IMAP%2C%20POP%2C%20and%2For%20IIS)%2C%20and%20then%20click%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%3EOK%3C%2FSTRONG%3E.%20Your%20certificate%20is%20now%20ready%20to%20use%20with%20Exchange%202016.%3C%2FLI%3E%3C%2FOL%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20issue%20I%20get%20is%20at%20the%20%22pending%20certificate%22%20does%20not%20show%20up%20in%20the%20list%20in%20EAS%2C%20just%20the%20original%20certificate%20still%20showing%20%22expires%20on%22%20as%20shown%20in%20the%20image.%26nbsp%3B%20%26nbsp%3BI%20have%20tried%20several%20times%2C%20verified%20that%20I%20am%20downloading%20the%20Exchange%20SLL%2C%20verified%20that%20it%20is%20for%20this%20particular%20server%2C%20restarted%20IIS%20etc%20etc.%26nbsp%3B%20The%20server%20is%20on%20prem%20physical%20Windows%202016%20Exchange%20server%20and%20there%20is%20only%20only%20one.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIdeas%3F%3C%2FP%3E%3CP%3EThanks!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1989589%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3E2016%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1991132%22%20slang%3D%22en-US%22%3ERe%3A%20Updating%20SSL%20Certificate%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1991132%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F902721%22%20target%3D%22_blank%22%3E%40RoRoSystems%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWas%20the%20initial%20CSR%20generated%20on%20the%20same%20exchange%20server%3F%20or%20just%20imported%20from%20a%20previously%20sourced%20pfx%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Visitor

Hello!   I am trying to update our expiring SSL certificate and here is what I am following to do so:

 

To Install an Intermediate Certificate in Microsoft Exchange Server 2016

  1. Click Start, and then click Run....
  2. Type mmc, and then click OK. The Microsoft Management Console (Console1) window opens.
  3. In the Console1 window, click File, and then select Add/Remove Snap-in.
  4. In the Add or Remove Snap-ins window, select Certificates, and then click Add.
  5. In the Computer Account window, select Computer Account, and then click Next.
  6. In the Select Computer window, select Local Computer, and then click Finish.
  7. In the Add or Remove Snap-ins window, click OK.
  8. In the Console1 window, click + to expand the Certificates (Local Computer) folder on the left.
  9. Right-click Intermediate Certification Authorities, mouse over All Tasks, and then click Import.
  10. In the Certificate Import Wizard window, click Next.
  11. Click Browse to find the intermediate certificate file.
  12. In the Open window, change the file extension filter to PKCS #7 Certificates (*.spc;*.p7b), select the *_iis_intermediates.p7b file, and then click Open.
  13. In the Certificate Import Wizard window, click Next.
  14. Select Place all certificates in the following store, and then click Browse.
  15. In the Select Certificate Store window, select Intermediate Certification Authorities, and then click OK.
  16. In the Certificate Import Wizard window, click Next.
  17. Click Finish.
  18. Click OK.
  19. Close the Console1 window, and then click No to remove the console settings.
  1. To Install an SSL Certificate in Microsoft Exchange Server 2016
    1. Log in to the Exchange Admin Center.
    2. From the left menu, select Servers, and then click Certificates.
    3. Select your certificate (it has a “Pending request” status), and then click Complete.
  2. For File to import from, enter the certificate file path we provided (such as \\server\folder\coolexample.crt), and then click OK. Exchange installs your certificate.
  3. In the Certificates section, select your certificate again (the status changed to “Valid”), and then click Edit (pencil icon).
  4. Click Services, select the services to which the certificate applies (SMTP, UM, UM call router, IMAP, POP, and/or IIS), and then click OK. Your certificate is now ready to use with Exchange 2016.

 

 

The issue I get is at the "pending certificate" does not show up in the list in EAS, just the original certificate still showing "expires on" as shown in the image.   I have tried several times, verified that I am downloading the Exchange SLL, verified that it is for this particular server, restarted IIS etc etc.  The server is on prem physical Windows 2016 Exchange server and there is only only one.

 

Ideas?

Thanks!

1 Reply

@RoRoSystems 

 

Was the initial CSR generated on the same exchange server? or just imported from a previously sourced pfx?