I have a "Standard UCC SSL Certificate" from GoDaddy. I needed to add another SAN to it. They were able to reissue without having to create and submit a new CSR. However, I am now having trouble getting Exchange to recognize it. I went through the wizard for "Import Exchange Certificate" in the Server Configuration, and it said it was successful, but the new cert does not show up in the list. I tried doing it again, and was told that a certificate with that thumbprint already exists. So it's apparently there, but I seem to be missing a step before it will let me use it. I've searched for help, but everything I've found is about renewing the certificate or installing the initial one.
Asked
Active
Viewed 127 times
0
-
The way windows bind public/private key pairs it would be easier for you to re-key the certificate with the new SANs. Very easy to do with Godady and well documented for exchange. – Jacob Evans Jun 28 '17 at 17:44
-
Would it be best to treat this as a renewal on the Exchange side, or create a new one? – atariguy Jun 28 '17 at 21:41
-
never renew, always make new keypairs. – Jacob Evans Jun 28 '17 at 21:45