So i had an issue with my certificate expiring, so i'd better write this up since i ALWAYS forget how to do this since i do it ONCE a year.
So after many attempts at renewing the cert through the CA website and from within exchange and IIS, I decided to have a harder look in the Exchange Management Console. I clicked on "Server Configuration" then highlighted the expired certificate and clicked "Renew Exchange Certificate".
After supplying a file name for the .REQ file it produced this .req file that when i tried to open it was unreadable so i thought well i'll go into my CA and issue it through there.
So i connected to my CA opened up "Certification Authority" and right clicked on the CA name and clicked "All Tasks -> Submit New Request". I found the file that Exchange had created and then let the CA process the file. After it had processed it the certificate was put in the "Pending Requests" folder so into there i go, i proceed to right click the request goto "All Tasks -> Issue", from there the Certificate is issued into the "Issued Certificates" folder.
From here i needed to export the certificate so that i could import it into Exchange.
In the "Issued Certificates" folder right click the certificate and click "Open" then click on the "Details" tab and then click "Copy to File". Click "Next -> select Base-64 .CER -> click Next -> Give it a Filename -> then Click Next and Finish"
We have now exported our certificate and are ready to import it back into Exchange.
If we look in the Certificate section of Exchange we should see a pending request for a certificate, we need to right click on this and point our newly created .CER file to this request. Once done we should see that we have a certificate that matches the old one with the correct Name and important details like "issued to".
There is one more thing we have to do. We have to assign services to the certificate now i have all my services on one Cert excluding Unified Messaging which i dont use. So right click the Cert and click "Assign Services to Certificate" and ad the services that you will use, mainly IIS and SMTP.
After that you're all done and you shoudl see your certificate in there with all its services and so on.
-Fr33ze
