Exchange certificate renewal-in hybrid environment

fsdg 986 Reputation points
2021-02-24T09:37:55.18+00:00

Hello,
if I change on-premises Exchange 2013 3rd party certificate and than re-run HCW to attach this new certificate in hybrid enviroment does HCW only change this certificate information or does it change the whole configuration.
Im asking this because I have on premises send connector to O 365 disabled.I dont know why,but does re-running HCW change this connector to enabled or does it change only new certificate information?
71534-1.png

Exchange Server Management
Exchange Server Management
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Management: The act or process of organizing, handling, directing or controlling something.
7,369 questions
Microsoft Exchange Hybrid Management
Microsoft Exchange Hybrid Management
Microsoft Exchange: Microsoft messaging and collaboration software.Hybrid Management: Organizing, handling, directing or controlling hybrid deployments.
1,901 questions
0 comments
Accepted answer
  1. Andy David - MVP 142.3K Reputation points MVP
    2021-02-24T13:07:04.533+00:00

    It should stay disabled.

    Note you could just replace the cert, assign SMTP to it and manually update the connectors. Its not required to run the Wizard.

    https://practical365.com/exchange-server/configuring-the-tls-certificate-name-for-exchange-server-receive-connectors/ 

    [PS] C:\>$cert = Get-ExchangeCertificate -Thumbprint DE67EC3C8D679AA35D17678FEC51907272B1BAE2

[PS] C:\>$tlscertificatename = "<i>$($cert.Issuer)<s>$($cert.Subject)"

[PS] C:\>Set-ReceiveConnector "EX2016SRV1\HybridRecConnector" -TlsCertificateName $tlscertificatename

    Then do the same for the send connector 

    Set-SendConnector -Identity “Send Connector Name” -TLSCertificateName $tlscertificatename
    1 person found this answer helpful.

3 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Lucas Liu-MSFT 6,161 Reputation points
    2021-02-25T05:44:27.503+00:00

    Hi @fsdg ,
    For HCW, renew certificate does not need to re-run the HCW. If you planning to use the certificate for the SMTP service and select the new certificate, then I suggest you re-run the HCW.

    After you renew the certificate, you could run the commands provide by Andy to set the certificate bound to the sender connector. Then you could send test email to test the mail flow.

    According to check the sender connector in my Exchange hybrid environment. Then send connector to Office 365 is enabled by default. If you need to run HCW, it is recommended that you run the following command line to view the existing HCW settings. 

    Get-HybridConfiguration

    71920-2.png

    ----------

    If the response is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    1 person found this answer helpful.
  2. fsdg 986 Reputation points
    2021-02-24T14:50:25.467+00:00

    Note you could just replace the cert, assign SMTP to it and manually update the connectors. Its not required to run the Wizard.

    Thank you for advice.
    I thought to do only this without HCW.

  3. Mani Bhushan 1 Reputation point
    2021-08-31T19:51:38.377+00:00

    If Cert Issuer and Subject is same then only import new certificate and remove old cerificate will work?