It doesn't show up in the certificates MMC. It doesn't show up in Get-ExchangeCertificate When I try Import-ExchangeCertificate, it says that it's already there.
Workaround question: What determines the footprint of a cert? ie How do I get a cert with a different footprint? Change the CSR? Buy a new cert from the CA? Steve Hart Network Administrator 503.491.4343 -Direct | 503.492.8160 - Fax ________________________________ From: Joseph L. Casale [mailto:jcas...@activenetwerx.com] Sent: Thursday, January 24, 2013 4:15 PM To: MS-Exchange Admin Issues Subject: RE: Exchange 2007 Cert Problem So, Open up the store, either use the cli or the gui and look into the state of this pair. It sounds like at one point you dropped the associated private key, I'd look to see if it was actually still in the store, but from the sounds of it, I doubt it. jlc ________________________________ From: Steve Hart Sent: Thursday, January 24, 2013 4:42 PM To: MS-Exchange Admin Issues Subject: RE: Exchange 2007 Cert Problem Request: [PS] C:\>New-ExchangeCertificate -GenerateRequest -Path c:\mail_wrightimg_com.cs r -KeySize 4096 -SubjectName "c=US, s=Oregon, l=Portland, o=Wright Business Grap hics, cn=mail.wrightimg.com" -DomainName wrightimg.com, autodiscover.wrightimg.c om -PrivateKeyExportable $True Ran the CSR through the provider downloaded the cert files, unzipped them Import: [PS] C:\>Import-ExchangeCertificate -path c:\Certs\1-2013\Cert\wrightimg.com\gd_ iis_intermediates.p7b Worked the first time. Now it says: Import-ExchangeCertificate : Cannot import as there already is a certificate with a thumbprint of 7C4656C3061F7F4C0D67B319A855F60EBC11FC44. Enable: [PS] C:\>Enable-ExchangeCertificate -Services IMAP, POP, UM, IIS, SMTP -thumbpri nt 7C4656C3061F7F4C0D67B319A855F60EBC11FC44 The certificate with thumbprint 7C4656C3061F7F4C0D67B319A855F60EBC11FC44 was found but is not valid for use with Exchange Server (reason: PrivateKeyMissing). Remove: Remove-exchangecertificate -thumbprint 7C4656C3061F7F4C0D67B319A855F60EBC11FC44 Remove-ExchangeCertificate : The certificate with thumbprint 7C4656C3061F7F4C0D67B319A855F60EBC11FC44 was found but is not valid for use with Exchange Server (reason: PrivateKeyMissing). Steve Hart Network Administrator 503.491.4343 -Direct | 503.492.8160 - Fax ________________________________ From: Joseph L. Casale [mailto:jcas...@activenetwerx.com] Sent: Thursday, January 24, 2013 3:32 PM To: MS-Exchange Admin Issues Subject: RE: Exchange 2007 Cert Problem Can you post the cmds you have used to create the request? ________________________________ From: Steve Hart Sent: Thursday, January 24, 2013 4:10 PM To: MS-Exchange Admin Issues Subject: RE: Exchange 2007 Cert Problem I'm still stuck on this one. Any ideas? --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
