Exchange 2013 SSL auto renewed installation process

Question

My exchange SSL certificate is issued by CA GoDaddy. They automatically sent me the renewed certificate and I am trying to apply it per their Exchange2013 SSL install process.

In Exchange Admin center, the expiring certificate says .. renew so I cannot "Complete" the process and install.

I generated certificate request and that created the "Pending Request->Complete" status with the new expires date. Exchange admin center shows 2 certificates with my mail name with current and future expires on date. The old status is VALID.RENEW and the new one is Pending Request.Complete

I then clicked complete (intermediate already installed) and pointed to the downloaded, renewed .CRT. It takes it but the exchange admin center stays at pending request and does not move to VALID

How do I get the renewed certificate into exchange?

Answer 1

Generate the renew request from Exchange.
Copy that request contents and request a new cert from GoDaddy
Once you get the new cert from GoDaddy, complete the renewal request.

https://practical365.com/exchange-server/renewing-an-ssl-certificate-for-exchange-server-2013/

This applies to 2013 as well
https://norcliffe.com/2018/05/11/godaddy-and-auto-renewing-exchange-ssl-certificates/

You can also use Digicerts utility

https://www.digicert.com/kb/util/ssl-certificate-renewal-using-digicert-utility-exchange-2013.htm

Answer 2

OK< I submitted the Key request to GoDaddy. I'll post progress when I receive the Certificate

Answer 3

Re-key with CSR ... works

Thanks

I will turn off auto renewal and next time send CSR request