How to Renew SSL Certificate for Exchange 2013 Server Step by Step

One of the major tasks for Exchange admins is renewing an SSL certificate. Lots of times admins struggle to renew Exchange certificates and might end up in breaking up the Exchange server or servers. In this article, I have documented everything step by step, and what you need to do, to complete SSL certificate renewal successfully.

How to Renew SSL Certificate for 2013 Step by Step

1) Creating a new CSR (Certificate signing request)

1. Open EAC or Exchange Admin Center Web page.
2. Navigate to Servers section.
3. Click on Certificates Option.
4. Select Server Name.
5. Click on Certificate you need to renew.
6. Click on Renew option.
7. Save the new CSR request to your desired UNC path.
8. Submit the CSR request to generate a new certificate with your 3rd party Certificate vendor.
9. Download the new certificate.

2) Installing new certificate

1. Open EAC or Exchange Admin Center Web page.
2. Navigate to Servers section.
3. Click on Certificates Option.
4. Select Server Name.
5. Now Select Certificate with status "Pending Request".
6. Right-hand side, click on the complete option.
7.  Now enter the UNC path for new downloaded Certificate.

3) Assign New Certificate to Services like IIS, SMTP, IMAP or POP

1. Open EAC or Exchange Admin Center Web page.
2. Navigate to Servers section.
3. Click on Certificates Option.
4. Select Server Name.
5. Select the new certificate.
6. Click on Edit Icon.
7. Click on Services option.
8. Click on the Services checkbox you want to assign and save.
9. Certificate renew completed for the single server.

Note: If you have more than one Exchange server. Move to Step 4.

4) Exporting Certificate from First Exchange Server in the same Org.

1. Export certificate from the server you first renewed or installed.
2. Open EAC or Exchange Admin Center Web page.
3. Navigate to Servers section.
4. Click on Certificates Option.
5. Select First Server Name.
6. Select the new certificate you want to export.
7. Click on “…” or more icon and select Export Exchange Certificate.
8. Enter the UNC path, where you want to export the new certificate.
9. Provide the password and follow rest of the steps.

5) Importing Certificate on Other Exchange Servers in the same Org.

1. Open EAC or Exchange Admin Center Web page.
2. Navigate to the Servers section.
3. Click on the Certificates Option.
4. Click on “…” or more icon.
5. Click Import Exchange Certificate
6. Enter the UNC path for the exported certificate you did in step 4 above.
7. Enter the password you gave in step 4 above.
8. Now click on "+" icon and add your other Exchange 2013 servers.
9. Follow Wizard and finish the import process.

6) Assign Services on other Exchange servers.

• Follow Step 3.

Note: If you have Hardware Load Balancer, you need to install the new certificate on your HLB also.

Hope you found this helpful.

Show Full Free/Busy Details for Exchange Server 2010 Room and Resource Mailboxes

In the comments of my article about Exchange Server 2010 Room mailboxes some readers wanted to know how they can configure the Room mailbox to show more details about existing meetings in the free/busy information that is revealed to other users on the network.
Consider the scenario where a room is booked, and perhaps another person wants to contact existing meeting organizers to ask if they can remove a booking to make room for a more important one, but the free/busy information (as seen in the Outlook Scheduling Assistant) doesn’t indicate who made the bookings.

This is caused by the default permissions on the mailbox’s calendar. These default permissions are set to show only the availability information (eg free, busy, tentative) but not any other details.
In the calendar permissions (if you were modifying them via Outlook) it would look like this.

If viewed in the shell it with Get-MailboxFolderPermission it would appear like this.

[PS] C:\>Get-MailboxFolderPermission homeetingroom1:\Calendar

RunspaceId   : 8706cde4-2cb5-4519-9a46-a46fcc0c450c
FolderName   : Calendar
User         : Default
AccessRights : {AvailabilityOnly}
Identity     : Default
IsValid      : True

If you modified the permissions using Outlook the new permission level of Reviewer would allow other users to see more details about existing meetings.





You can apply that same permission in the Exchange Management Shell using the Set-MailboxFolderPermission cmdlet (note: Set-MailboxFolderPermission modifies an existing entry, whereas Add-MailboxFolderPermission would be used to add a new entry to the permissions).

Set-MailboxFolderPermission homeetingroom1:\Calendar -User Default -AccessRights Reviewer

The results can be seen in the Get-MailboxFolderPermission output.

[PS] C:\>Get-MailboxFolderPermission homeetingroom1:\Calendar

RunspaceId   : 8706cde4-2cb5-4519-9a46-a46fcc0c450c
FolderName   : Calendar
User         : Default
AccessRights : {Reviewer}
Identity     : Default
IsValid      : True

RunspaceId   : 8706cde4-2cb5-4519-9a46-a46fcc0c450c
FolderName   : Calendar
User         : Anonymous
AccessRights : {None}
Identity     : Anonymous
IsValid      : True

When creating a new meeting request users are now able to see more details about the meeting organizer.

You can modify all the default permissions on Room mailboxes with the following commands in the Exchange Management Shell.

[PS] C:\>$rooms = Get-Mailbox -RecipientTypeDetails RoomMailbox
[PS] C:\>$rooms | %{Set-MailboxFolderPermission $_":\Calendar" -User Default -AccessRights Reviewer}

Original Link