No announcement yet.

StartTLS Certificate Warning

  • Filter
  • Time
  • Show
Clear All
new posts

  • StartTLS Certificate Warning

    Hello All

    Recently the exchange server start to send warning alerts in the event viewer about the "STARTTLS certificate will expire soon, run new-exchangecertificate.".
    In the get-exchangecertificate | fl , command I can see that this certificate is belong to the smtp service and it was issued to the local server exchange.domain.local.
    On the exchange server iis I have a real certificate that was issued from go daddy.

    My question is:
    Can I renew the smtp,pop,imap certificate with the command new-exchangecertificate without changing the iis certificate that will expire in 2010.

  • #2
    Re: Starttls

    Is the certificate you have from GoDaddy a SAN/UC certificate with the relevant names in it?
    If so, then remove the self generated certificate that it is complaining about and ensure that your GoDaddy certificate is enabled for the SMTP service.

    Simon Butler
    Exchange MVP

    More Exchange Content:
    Exchange Resources List:
    In the UK? Hire me:

    Sembee is a registered trademark, used here with permission.