最佳解答者
The STARTTLS certificate will soon expire. The STARTTLS certificate is the certificate not used for internal TLS applications

問題
-
I got this error from MOM
"The STARTTLS certificate will soon expire. The STARTTLS certificate is the certificate not used for internal TLS applications." for our two servers, each of them have both OWA and Hub Transport roles.
What should I do?
I read technet that I need to renew the e-cert which was generated as self-signed e-cert during installation of Exchange. But I am not sure which e-cert is going to expire.
FYI. We have purchased e-cert for external access to OWA.
解答
-
Hi,
You can run the following command to check what certificates are available and will expire:
Get-ExchangeCertificate | FL CertificateDomains, Thumbprint, NotBefore, NotAfter, Status
If you found one certificate will expire in one month, you can use new-exchangecertificate cmd-let to generate a new one.
Exchange Server 2007: Renewing the self-signed certificate
http://exchangepedia.com/blog/2008/01/exchange-server-2007-renewing-self.html
If anything is unclear, feel free to let me know.
Regards,
Rock Wang
Rock Wang– MSFT- 已標示為解答 Rock Wang– MSFTModerator 2009年3月25日 上午 01:46
所有回覆
-
Hi,
Have you read this article?
http://technet.microsoft.com/en-us/library/bb218312.aspx
If you have read that, you should create another cert!
http://groups.google.com/group/microsoft.public.exchange.admin/browse_thread/thread/737445201294b0c5
Do you have any problem with getting cert?
I don't think you have this problem becuase you have your own external cert- vendor
:)
M.C. -
Hi,
You can run the following command to check what certificates are available and will expire:
Get-ExchangeCertificate | FL CertificateDomains, Thumbprint, NotBefore, NotAfter, Status
If you found one certificate will expire in one month, you can use new-exchangecertificate cmd-let to generate a new one.
Exchange Server 2007: Renewing the self-signed certificate
http://exchangepedia.com/blog/2008/01/exchange-server-2007-renewing-self.html
If anything is unclear, feel free to let me know.
Regards,
Rock Wang
Rock Wang– MSFT- 已標示為解答 Rock Wang– MSFTModerator 2009年3月25日 上午 01:46