Comments on: Exporting Existing SSL OWA Certificates from Exchange 2003 FES to Exchange 2007 SP1 CAS on Windows 2008…

By: Matt

Matt — Wed, 11 Nov 2009 15:50:27 +0000

Just wanted to say thanks for the invaluable doc. Your scenario matched mine perfectly and you saved me a lot of time.

By: Bijoy

Bijoy — Wed, 28 Oct 2009 07:05:10 +0000

Dear Sir:

I installed windows 2008 64 bit & exchange 2007.
pop3/smtp & exhange users using this.

now my exchange users getting mail from pop3/smtp users in junk folder. how can i solve this ?

lot of spam mail also coming.
i configured CAS,Mail box server, Hub transport server.

Please help me on the following issue
Sincerely
Bijoy

By: Lord Melch

Lord Melch — Tue, 29 Sep 2009 12:03:25 +0000

Great Article – thanks

By: tylerbrenner.com » Blog Archive » iPhones

tylerbrenner.com » Blog Archive » iPhones — Wed, 22 Jul 2009 03:56:12 +0000

[...] e-mail (use another Gmail pop account or something). The link I found that shows how to export is here. I’m too tired to test until tomorrow AM. Guess I’ll be going in [...]

By: Rich

Rich — Fri, 29 May 2009 16:42:22 +0000

Excellent blog, was very helpful for getting my certificate moved. I was going from Windows 2003 x32 Exchange 2003 to Windows 2003 x64 with Exchange 2007. The screens with your output did now appear in Firefox, but the instructions were definitely clear enough for me to accomplish the task.

Again, Thank you

Rich

By: Stanford

Stanford — Sat, 31 Jan 2009 19:46:45 +0000

Thank you very much for posting instructions on how to perform the SSL certificate migration from Exchange 2003 to Exchange 2007. I’m astonished at how a simple task has become so convuluted with the introduction of Exchange 2007 and IIS 7.0. This task was easier to accomplish between Exchange 2003 servers.

By: Fl

Fl — Wed, 29 Oct 2008 01:33:40 +0000

I don’t have the orginal cer file either. I know how to export/import the pfx file but the article also mentions importing the cer file from the command shell as well as the tumbprint. Is this required if I only have the pfx file and import it through IIS?

I have a single exchange 2007 server.

Thank you.

By: Networknet.nl » Blog Archive » SSL certificate Windows Server 2008 and Exchange 2007 SP1

Wed, 27 Aug 2008 12:21:10 +0000

[...] Exporting Existing SSL OWA Certificates from Exchange 2003 FES to Exchange 2007 SP1 CAS on Windows 2… [...]

By: Richard

Richard — Tue, 05 Aug 2008 20:07:07 +0000

I Just got it – it appears that MS ships window 2008 with an expired intermediate cert from VeriSign…brilliant.

updated the intermediate cert (which expired in 2004) and that fixed it.

By: Richard

Richard — Tue, 05 Aug 2008 19:41:58 +0000

I can export from the 03 server to a pfx – I am prompted to create a password when I do so. But when I import it to the 08 server I provide the password, the import completes but if I look at the cert its status is ‘This certificate is expired or not yet valid’

(Valid from 4/3/08 through 4/3/11)
Am I missing something?

By: Andy Grogan

Andy Grogan — Tue, 05 Aug 2008 19:34:39 +0000

Then you will need to export the existing certificate from your Front end server using IIS to a PFX file.

IIS will ask you to provide a private key – during the import you will be prompted for this key.

By: Richard

Richard — Tue, 05 Aug 2008 19:07:48 +0000

Care to expand on this? I do not have a .cer file.

Ensuring that you have a copy of the original .cer file (the SSL certificate) from your issuer – this is not essential but really does help remove an element of complexity during the migration process – this article will assume that you have the original .cer file (if you do not have it e-mail me and I will elaborate on what you can do with the .pfx file).

Thanks,

By: Andy Grogan

Andy Grogan — Wed, 09 Apr 2008 18:32:03 +0000

Hiya Jesse, Sorry for the delay – I guess it depends on how you have you CAS servers and DNS name spaces configured.

Although the article was based around how to move the Certificate only from one server to another – the way in which my clients connect to the CAS server both Internally and Externally is via the same DNS Namespace – which can be configured in the “Autodiscover.xml” file (so I have not had any issues).

Although one thing that I will admit to is that my network does not have that many Outlook 2007 clients on it at the moment (only mine which seems to work fine).

Cheers

By: jesse

jesse — Tue, 08 Apr 2008 04:05:24 +0000

Using this method, don’t ol2007 clients return Cert errors as your cert doesn’t have the fully qualified internal name?

By: Weekend reading - subject: exchange

Weekend reading - subject: exchange — Fri, 04 Apr 2008 19:30:39 +0000

[...] Exporting Existing SSL OWA Certificates from Exchange 2003 FES to Exchange 2007 SP1 CAS on Windows 2… [...]