Re: Is Get-ExchangeCertificate supposed to show newly imported cer

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



I dont think you need to use Powershell to generate a cert request. Just use
IIS to make the request and then upload the request to the cert provider then
import the cert into IIS when you get it. Thats what i did and i am running
Exchange 2007 and it the cert works great for autodiscovery and OWA. I never
went through the command shell

"DSotnikov@xxxxxxxxx" wrote:

Here's what I am trying to do:
1. Generate a request (New-ExchangeCertificate -GenerateRequest).
2. Go to certificate services web page and submit a cerificate
request.
3. Import the certificate file into Exchange (Import-
ExchangeCertificate).
4. Enable it for IIS (Enable-ExchangeCertificate).

This seemed like a logical sequence to me... Am I missing something?
Am I using the commands not the way they are supposed to be used?

Thanks!
Dmitry


On May 2, 9:46 pm, "fast247.biz" <e.bell...@xxxxxxxxxxx> wrote:
What are you using it for? We found that importing it in IIS usually
does the trick as long as the full host name is the same as your
exchange hostname

On 2 May, 18:35, DSotni...@xxxxxxxxx wrote:



I am trying to use PowerShell command-line to work with Exchange 2007
certificates and am facing the following issue:

When I import a new certificate - it won't show up in the certificate
list (Get-ExchangeCertificate) until I enable it. It seems that
sometimes it would indeed show up but sometimes it would not so I am
completely lost here.

At the same time the certificate is indeed there. If I try to import
it again I am getting an error message.

I can also enable the certificate even if it does not show up. I have
to manually type in the thumbprint though - which is not something I
want to do, and more importantly does not allow me to bulk-import
using pipeline from Get-ExchangeCertificate to Enable-
ExchangeCertificate.

Any comments/advise?

Is that a bug or me doing something wrong?

Thanks!
Dmitry- Hide quoted text -

- Show quoted text -



.



Relevant Pages

  • Re: Using Microsoft Cert Service for Exchange 2007/IIS
    ... I installed as much as 10-15 Exchange CAS during the last 1 and a half years ... alternative names required in Cert) you also can have different authenication ... mechanism per virtual IIS instance and CAS feature. ... You need a dedicated IP per virtual server. ...
    (microsoft.public.exchange.setup)
  • Re: Backup "pending request"?
    ... > and assign in IIS MMC. ... > a) remove all cert in your cert store ... the request and response from the CA only contain the public key, ...
    (microsoft.public.inetserver.iis.security)
  • Re: Backup "pending request"?
    ... > and assign in IIS MMC. ... > a) remove all cert in your cert store ... the request and response from the CA only contain the public key, ...
    (microsoft.public.inetserver.iis.security)
  • Re: SSL and OWA
    ... I just used metabase explorer to make sure I was importing the cert into the ... IIS is where most of the work ... I've attempted to enable the ssl, run iisreset that recheck use forms based ... auth in the exchange virtual server properties in exchange manager and I get ...
    (microsoft.public.exchange.admin)
  • Re: SSL Cert and OWA on Different Servers
    ... same box be the IIS Front end for exchange 2007 with that same cert. ... Can I move the "CA" role to the existing machine with the cert and IIS? ... box and then install Exchange. ...
    (microsoft.public.exchange.admin)