Certs for Exchange 2007

We currently have the default Exchange 2007 certs installed and wish to get
a UCC public certs from a public company.

Question:

Do I need to "uninstall" the current default certificate or do I just
proceed with EXPORT to generate a .REQ file and then IMPORT the
corresponding .CRT file?

Andy
Tue Jul 22 17:46:36 CDT 2008

On Tue, 22 Jul 2008 16:57:28 -0500, "JASON HATCHER"
<jhatcher@SMITHC.COM> wrote:

>We currently have the default Exchange 2007 certs installed and wish to get
>a UCC public certs from a public company.
>
>Question:
>
>Do I need to "uninstall" the current default certificate or do I just
>proceed with EXPORT to generate a .REQ file and then IMPORT the
>corresponding .CRT file?


Use Powershell to import and enable for the services required.

http://technet.microsoft.com/en-us/library/bb124424(EXCHG.80).aspx
http://technet.microsoft.com/en-us/library/aa997231.aspx

JASON
Tue Jul 22 23:14:29 CDT 2008

I know the commands to run (syntax wise), the QUESTION WAS does the default
cert need to be removed before running the export/import of new cert?





"Andy David {MVP}" <adavid@pleasekeepinngcheesebucket.com> wrote in message
news:9noc841br8thder0dokvm7egnq4caoaski@4ax.com...
> On Tue, 22 Jul 2008 16:57:28 -0500, "JASON HATCHER"
> <jhatcher@SMITHC.COM> wrote:
>
>>We currently have the default Exchange 2007 certs installed and wish to
>>get
>>a UCC public certs from a public company.
>>
>>Question:
>>
>>Do I need to "uninstall" the current default certificate or do I just
>>proceed with EXPORT to generate a .REQ file and then IMPORT the
>>corresponding .CRT file?
>
>
> Use Powershell to import and enable for the services required.
>
> http://technet.microsoft.com/en-us/library/bb124424(EXCHG.80).aspx
> http://technet.microsoft.com/en-us/library/aa997231.aspx
>
>
>

Oliver
Wed Jul 23 05:35:18 CDT 2008

You don't export.

You first use the new-exchangecertificate cmdlet, and then once this cer
data has sent to your Trusted Root and the actual cert given back you import
it using the import-exchangecertficate cmdlet.

Once that is done you use the enable-exchangecertificate cmdlet.

Oliver

Andy
Wed Jul 23 06:27:54 CDT 2008

On Tue, 22 Jul 2008 23:14:29 -0500, "JASON HATCHER"
<jhatcher@SMITHC.COM> wrote:

>I know the commands to run (syntax wise), the QUESTION WAS does the default
>cert need to be removed before running the export/import of new cert?

well, I ANSWERED your question.
If you know the commands, then after you have generated the request,
imported and enabled the new one, you are done. ( Generate, import and
enable all with Powershell is the easiest way)
no need to remove the existing cert if you dont want to.


.

>
>
>
>
>
>"Andy David {MVP}" <adavid@pleasekeepinngcheesebucket.com> wrote in message
>news:9noc841br8thder0dokvm7egnq4caoaski@4ax.com...
>> On Tue, 22 Jul 2008 16:57:28 -0500, "JASON HATCHER"
>> <jhatcher@SMITHC.COM> wrote:
>>
>>>We currently have the default Exchange 2007 certs installed and wish to
>>>get
>>>a UCC public certs from a public company.
>>>
>>>Question:
>>>
>>>Do I need to "uninstall" the current default certificate or do I just
>>>proceed with EXPORT to generate a .REQ file and then IMPORT the
>>>corresponding .CRT file?
>>
>>
>> Use Powershell to import and enable for the services required.
>>
>> http://technet.microsoft.com/en-us/library/bb124424(EXCHG.80).aspx
>> http://technet.microsoft.com/en-us/library/aa997231.aspx
>>
>>
>>

Peter
Tue Jul 22 18:13:53 CDT 2008

and then remove the old certificates - just to be on the safe side :-)



"Andy David {MVP}" <adavid@pleasekeepinngcheesebucket.com> wrote in message
news:9noc841br8thder0dokvm7egnq4caoaski@4ax.com...
> On Tue, 22 Jul 2008 16:57:28 -0500, "JASON HATCHER"
> <jhatcher@SMITHC.COM> wrote:
>
>>We currently have the default Exchange 2007 certs installed and wish to
>>get
>>a UCC public certs from a public company.
>>
>>Question:
>>
>>Do I need to "uninstall" the current default certificate or do I just
>>proceed with EXPORT to generate a .REQ file and then IMPORT the
>>corresponding .CRT file?
>
>
> Use Powershell to import and enable for the services required.
>
> http://technet.microsoft.com/en-us/library/bb124424(EXCHG.80).aspx
> http://technet.microsoft.com/en-us/library/aa997231.aspx
>
>
>

Andy
Wed Jul 23 19:43:35 CDT 2008

On Wed, 23 Jul 2008 01:13:53 +0200, "Peter Van Eeckhoutte"
<peter.ve@telenet.be> wrote:

>and then remove the old certificates - just to be on the safe side :-)

Well, actually you dont have to. :)
When you enable the new certificate for IIS, it will replace the
existing one automatically. Kinda nice really.
The old one can just sit in the certificate store.


>
>
>
>"Andy David {MVP}" <adavid@pleasekeepinngcheesebucket.com> wrote in message
>news:9noc841br8thder0dokvm7egnq4caoaski@4ax.com...
>> On Tue, 22 Jul 2008 16:57:28 -0500, "JASON HATCHER"
>> <jhatcher@SMITHC.COM> wrote:
>>
>>>We currently have the default Exchange 2007 certs installed and wish to
>>>get
>>>a UCC public certs from a public company.
>>>
>>>Question:
>>>
>>>Do I need to "uninstall" the current default certificate or do I just
>>>proceed with EXPORT to generate a .REQ file and then IMPORT the
>>>corresponding .CRT file?
>>
>>
>> Use Powershell to import and enable for the services required.
>>
>> http://technet.microsoft.com/en-us/library/bb124424(EXCHG.80).aspx
>> http://technet.microsoft.com/en-us/library/aa997231.aspx
>>
>>
>>

Martin
Wed Jul 23 20:28:44 CDT 2008


"Andy David {MVP}" <adavid@pleasekeepinngcheesebucket.com> wrote in message
news:6vjf841gq4id05bog0plteenfdfli7nm4f@4ax.com...
> On Wed, 23 Jul 2008 01:13:53 +0200, "Peter Van Eeckhoutte"
> <peter.ve@telenet.be> wrote:
>
>>and then remove the old certificates - just to be on the safe side :-)
>
> Well, actually you dont have to. :)
> When you enable the new certificate for IIS, it will replace the
> existing one automatically. Kinda nice really.
> The old one can just sit in the certificate store.
>
I don't think I have ever deleted a certificate. Maybe some really really
ones, but its not something I usually do.