Can I renew the Exchange Certificate (SSL) without using a REQ file?

Catherine Jaszewski 716 Reputation points
2021-10-07T12:43:32.523+00:00

Our certificate authority sent us a .CRT file to use for renewing our Exchange 2019 Certificate (without a Certificate Request - .REQ file). When I click on the Renew link in Exchange Admin Center (EAC) it created a REQ file. Do I need to wait for the REQ file to be processed (using the CER file from the request)? I tried to use the .CRT file (actually copied this to a CER file as that is what the Complete Request is looking for) from the renewal our CA sent us. I am not getting any errors but I cannot export the certificate (to import it to our other Exchange Servers). My thinking is I need the CER file from the REQ file to complete the Pending Request. Am I correct in my thinking?

Please advise.

Thank you,

Exchange Server Management
Exchange Server Management
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Management: The act or process of organizing, handling, directing or controlling something.
7,369 questions
0 comments
Accepted answer
  1. Andy David - MVP 142.3K Reputation points MVP
    2021-10-07T13:44:13.88+00:00

    Hi there, I always recommend starting from Exchange and creating the renewal/request from there - its so much cleaner!

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Andy David - MVP 142.3K Reputation points MVP
    2021-10-07T13:03:22.637+00:00

    Yes, create the request from Exchange, submit to your CA, Import that back to the server that requested it, then export with the private key as a pfx with a password and then you can import to any other Exchange Server when you provide the password.