If you are using Exchange 2007 and didn’t get a 3rd party certificate you will start seeing certificate errors on your clients one year after your install stating that the certificate has expired. The solution is simple in that you can create a new self signed certificate (for another year). The process to renew the certificate is as follows:
Start the Exchange Management Console and type in the following cmdlet to get the current certificate: get-exchangecertificate -domain “myserver.mydomain.com” | fl
This will return a number of pieces of information about the certificate including the thumb print. Right click and select the Mark option to mark text to copy, high light the thumb print value and hit the Enter key to copy it. To create a new certificate using the existing one to “clone” enter the following cmdlet: get-exchangecertificate -thumbprint “thethumbprintreturnedinthepreviouscommand” | new-exchangecertificate
This will prompt you to overwrite any existing certificate so enter Y to do so. The command will return the thumb print of the new certificate. Check out the new certificate by entering the command get-exchangecertificate -thumbprint “newthumbprint” | fl
Once you are sure all is well go ahead and delete the old certification using the command: remove-exchangecertificate -thumbprint “oldcertificatethumbprint”
One thing to note is that in some cases IIS will be running and will be using the old certificate. In this case you need to set IIS to use this new certificate by calling this command: enable-exchangecertificate -thumbprint “certificatethumbprint” -services IIS