Exchange 2010 - How to renew a SSL Certificate with DigiCert Part 2

Part 2 of how to install an SSL Certificate for Exchange 2010

Step 16 - Order

The order is now processing and will be available in the next 30 mins.

Step 17 - Download Certificate

When the Certificate is available choose the option to download the certificate, choose the right version for your Server Software.

Step 18 - Transfer CER file to Exchange Server

Transfer the CER file to the root of the Exchange Server.

Step 19 - Import CER file with Powershell

Import the CER file using the following Powershell cmd

Import-ExchangeCertificate -FileData ([Byte[]]$(Get-Content -Path c:\mycert.cer -Encoding byte -ReadCount 0)) | Enable-ExchangeCertificate -Services "IIS,POP,IMAP,SMTP"

Step 20 - Check Certificates in use

Use the Get-ExchangeCertificate cmd to check the certificates installed, you will now see you have the renewed certificate and the old certificate. You now need to remove all the old expired certificates.

Step 21 - Confirm Renewed Certificate

Use the Get-ExchangeCertificate | FL cmd to show the certificate details and confirm the renewed certificate is installed as Valid and has the correct notAfter date.

Step 22 - Remove Expired Certificates

Use the Get-ExchangeCertificate cmd and find any certificate that has expired or is no longer required. Copy the Thumbprint to the clipboard.

Step 23 - Remove Certificate cmd

Enter the cmd to remove the certificate with the Thumbprint on the clipboard.

Remove-ExchangeCertificate -Thumbprint Thumbprint

Step 24 Check Certificate on Service

Visit the Exchange Outlook Web App and check the certificate displayed is the renewed certificate.