How to Unassign Self-Signed Certificate from SMTP on Exchange 2010

exchange-2010self-signed-certificatesmtpssl-certificate

We have a GoDaddy wildcard certificate that we have installed into Exchange 2010 and is successfully used on IIS connections for OWA.

We have assigned this certificate to the SMTP Service as well as IIS, but that doesn't seem to have unassigned the default self-signed certificate.

The self-signed certificate is already assigned to SMTP, IMAP and POP (we can't use the wildcard certificate for IMAP and POP due to it being a wildcard). Is it possible to unassign a self-signed certificate from just the SMTP service?

The only documentation I've found relates to removing a certificate completely.

Best Answer

You can do this with Enable-ExchangeCertificate in the EMS by specifying None for that certificate.

https://technet.microsoft.com/en-us/library/dd351257(v=exchg.141).aspx

Related Solutions

Wildcard ssl certificate – exchange 2010 – POP/IMAP problem

Unfortunately, your best option is to get a UC cert, which means ditching the wildcard and purchasing a new one entirely. See my answer HERE for a similar question.

Iis – Why is the self-signed wildcard certificate not working

As mentioned by David Schwartz this doesn't work for Top Level domains. However it works for any domain below that.

To my c:\windows\system32\drivers\etc\hosts file I added

127.0.0.1 mysitename.localhost.dev

Here .dev is the top level, so I can issue a wildcard to *.localhost.dev

I haven't done this with IIS but this works fine using apache and specifying

<VirtualHost *:80>
    DocumentRoot C:/xampp/htdocs/hookd/mysite/public
    ServerName mysitename.localhost.dev
</VirtualHost>

Unfortunately you'll have to setup a new entry in hosts and in the apache config for each site but it's a lot easier than signing a new certificate.

Best Answer

Related Solutions

Wildcard ssl certificate – exchange 2010 – POP/IMAP problem

Iis – Why is the self-signed wildcard certificate not working

Related Topic