question

CatherineJaszewski-5685 avatar image
0 Votes"
CatherineJaszewski-5685 asked CatherineJaszewski-5685 commented

Can I renew the Exchange Certificate (SSL) without using a REQ file?

Our certificate authority sent us a .CRT file to use for renewing our Exchange 2019 Certificate (without a Certificate Request - .REQ file). When I click on the Renew link in Exchange Admin Center (EAC) it created a REQ file. Do I need to wait for the REQ file to be processed (using the CER file from the request)? I tried to use the .CRT file (actually copied this to a CER file as that is what the Complete Request is looking for) from the renewal our CA sent us. I am not getting any errors but I cannot export the certificate (to import it to our other Exchange Servers). My thinking is I need the CER file from the REQ file to complete the Pending Request. Am I correct in my thinking?

Please advise.

Thank you,

office-exchange-server-administration
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

AndyDavid avatar image
0 Votes"
AndyDavid answered CatherineJaszewski-5685 commented

Hi there, I always recommend starting from Exchange and creating the renewal/request from there - its so much cleaner!

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

I agree...
Thank you again for all your help and advise.
It is greatly appreciated!

0 Votes 0 ·
AndyDavid avatar image
0 Votes"
AndyDavid answered CatherineJaszewski-5685 commented

Yes, create the request from Exchange, submit to your CA, Import that back to the server that requested it, then export with the private key as a pfx with a password and then you can import to any other Exchange Server when you provide the password.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi Andy!
So good to hear from you!

I kind of figured we need to use the CER file that comes from the REQ file. However, we received the CRT file from our CA before we sent a REQ...Meaning he simply renewed the certificate and sent us a CRT .


Do you know if there is a work around...Or a way to fool the Exchange renewal process...And use the CRT\CER file without the processing the REQ? Or are we better off getting the REQ fulfilled and using the CER produced from the request.

Please advise.

Thank you,

0 Votes 0 ·