Share via

SSL Certificate on Exchange Servers with no assigned services

mara2021 1,121 Reputation points
2024-11-11T02:58:19.67+00:00

I have 2 exchange hybrid servers. Mailboxes are in Exchange Online. I received a message that an SSL certificate was expiring on 11/19/2024. The SSL certificate does not have any assigned services. Another SSL certificate with the same name will expire in May 2025. There are no assigned services. I don't think either cert are/will be used. I ran the "Get-ExchangeCertificate" command to make sure there were no assigned services. I want to remove/disable the certs (at least the one expiring on 11/19/2024) since there are no services assign. Is there a command to just disable the cert instead of removing? what else do I need to check before disabling/removing? Thanks for your help.

Exchange Online
Exchange Online
A Microsoft email and calendaring hosted service.
6,182 questions
Exchange | Exchange Server | Management
Exchange | Hybrid management
0 comments
Accepted answer
  1. Amit Singh 5,306 Reputation points
    2024-11-11T04:30:28.81+00:00

    As you had mentioned, you want to disable the certificate, but there is no built-in command in Exchange to disable. You can remove the certificate as it’s not in use.

    Use this PowerShell command to do so- 

    Remove-ExchangeCertificate -Thumbprint <thumbprint-of-expiring-cert>

    Double-check that you are removing the correct certificate by its thumbprint before running the command.

    1 person found this answer helpful.

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.