"users\all users\microsoft\crypto\rsa\machine keys"
On Wed, Aug 26, 2009 at 3:20 PM, Chris W. Parker<cpar...@aardvarktactical.com> wrote: > What might that path be on server 2008? I'm not able to find it. All the > paths I've taken beyond c:\users\default\appdata\ have been unfruitful. > > Thanks. > > ________________________________________ > From: Tom Kern [tpk...@gmail.com] > Sent: Wednesday, August 26, 2009 7:13 AM > To: MS-Exchange Admin Issues > Subject: Re: Can't set SSL cert services to "none" on Ex07 > > Outlook complaining would have nothing to do with smtp and more with > IIS. Specifically autodiscover. > You are correct the "-services none" parameter does not work and the > documentation is misleading on Technet and is due to change shortly. > > If this is NOT the default cert (the one used for x-anonymous tls) and > it is just a self-signed cert you created, why not just run > remove-exchangecertificate? > > If it is a 3rd party CA cert and you only want to remove smtp as a > service then go to c:\documents and settings\All Users\Application > Data\Microsoft\Crypto\RSA\MachineKeys and remove "Network Service" > from the ACL of the cert file in there. > You can find which cert is yours by matching the timestamp on your > cert when you run get-exchangecertificate |fl NotBefore and attempt to > match that time with a date modified timestamp in the file system > within that folder > That will remove smtp as a service from the cert but based on what you > write I don't think smtp is the issue here > > Thanks > > > > > > > On Wed, Aug 26, 2009 at 4:08 AM, Sobey, Richard A<r.so...@imperial.ac.uk> > wrote: >> Chris >> >> I had/have the same issue - as I understood it the cmdlet just doesn't work >> as advertised, or you cannot have a certificate installed with no services >> attached to it. >> >> Regards >> >> Richard >> >> -----Original Message----- >> From: bounce-8640089-8066...@lyris.sunbelt-software.com >> [mailto:bounce-8640089-8066...@lyris.sunbelt-software.com] On Behalf Of >> Chris W. Parker >> Sent: 26 August 2009 06:17 >> To: MS-Exchange Admin Issues >> Subject: Can't set SSL cert services to "none" on Ex07 >> >> Hi everyone, >> >> I just installed a single name SSL cert for my Ex07 server and I noticed >> that Outlook started complaining about an invalid certificate when it is >> opened. I discovered that I mistakenly added SMTP as one of the services on >> the new cert when I think I should have only enabled it on IMAP, POP, and >> IIS. This means that get-exchangecertificate results in two certificates >> being on SMTP. To remove all the services I tried >> "enable-exchangecertificate -thumbprint <new_cert_thumbprint> -services >> none". This resulted in no errors but still get-exchangecertificate shows >> the same results. >> >> Any ideas on this? >> >> >> Thanks, >> >> >> Chris Parker >> Aardvark Tactical >> IT Manager >> 1002 W Tenth St. Azusa, CA 91702 >> phone 800.997.3773 x131 direct 626.610.0131 >> fax 626.334.6860 >> cpar...@aardvarktactical.com<mailto:cpar...@aardvarktactical.com> >> >> [http://www.swatgear.com/sig_logo_rsml.jpg] >> >> >> >> >> > >
