How to renew Certificate in exchange 2010

[guest]

I am try to renew the certificate in Exchange 2010 by following this article:
Renew an Exchange CertificateApplies to: Exchange Server 2010 SP1

You can use the Renew Exchange Certificate wizard to renew an existing Exchange Secure Sockets Layer (SSL) certificate.

Prerequisites
The Client Access server role has been installed and at least one certificate is installed on your Client Access server.

What Do You Want to Do?
Use the EMC to renew an Exchange certificate

Use the Shell to renew an Exchange certificate

Use the EMC to renew an Exchange certificate
You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Client Access server security settings" entry in the Client Access Permissions topic.

1.In the console tree, click Server Configuration.

2.Select the server that contains the certificate, and then select the certificate you want to renew.

3.In the action pane, click Renew Exchange Certificate.

4.On the Renew Exchange Certificate page, select the services you want to assign to the renewed certificate. The services that are checked are currently assigned to the certificate.

5.When you click Assign, the Progress page will confirm your selections and try to renew the certificate.

6.Click Yes to overwrite the existing certificate with the renewed certificate.

7.The Completion page will display the status of the request in addition to the syntax of the cmdlet needed to renew the certificate.

Use the Shell to renew an Exchange certificate
You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Client Access server security settings" entry in the Client Access Permissions topic.

This example renews the Exchange certificate.

Copy Code Enable-ExchangeCertificate -Server 'EXCH-H-868' -Services 'IMAP, POP, IIS, SMTP' -Thumbprint 'AD19B141228C7CF98B5F78DCED978B7C45E15434'

But can't make it.

[guest]

You may follow this instruction to renew it in IIS 7.
Renewing an IIS 7 SSL Certificate

Generate Renewal Certificate Request File (CSR)

1.Open the Internet Information Services (IIS) Manager. From the Start button select Programs > Administrative Tools > Internet Information Services Manager.
2.In the IIS Manager, select the main server node on the top left under Connections
3.In the Features pane (the middle pane), double-click the Server Certificates option located under the IIS or Security heading (depending on your current group-by view).
4.You will be presented with a list of SSL Server Certificates currently installed. Select and highlight the expiring certificate that you want to renew.
5.From the Actions pane on the right, select Renew . From the Renew an existing certificate dialog box choose the second option, Create a renewal certificate request. Click Next.
6.Specify a file name for the renewal certificate request. It doesn't matter what you call it or where you save it as long as you know where to find it. You'll need it in the next step. We recommend calling it certreq.txt.
7.Click Finish to complete the certificate request (CSR) wizard.
8.Now, from a simple text editor such as Notepad (do not use Word), open the CSR file you just created at c:\certreq.txt (your path/filename may be different). You will need to copy-and-paste the contents of this file, including the top and bottom lines, into the relevant box during the online order process.

Download and copy your certificate files to your server
Download your SSL certificate.

Copy the PKCS#7 file to your Exchange server (Saving to the desktop is fine, you can delete this file after it's installed). Rename the file your_domain_com.p7b to your_domain_com.cer

Install using Exchange Management Console GUI (recommended)
1.Start the Exchange Management Shell. Click Start > Programs > Microsoft Exchange Server 2010, and then click Exchange Management Console.
2.Click the link to "Manage Databases", and then go to "Server configuration".
3.Select your certificate from the menu in the center of the screen (The certificate will be listed by the Friendly Name you chose when creating the CSR), and then click the link in the Actions menu to "Complete Pending Request".
4.Browse to the certificate file you just copied to your server, then click Open > Complete.
5.Press F5 to refresh the certificate list. Verify that it says "False" under "Self Signed".
6.To enable your certificate, return to the Exchange Management Console and click the link to "Assign Services to Certificate."
7.Select your certificate from the list provided, then click Next.
8.Select the services for which you would like to enable your new certificate, click Next > Assign > Finish. Your certificate should now be Installed and Enabled for use with Exchange.

Install the PKCS#7 SSL Server Certificate File in IIS 7
1.Open the Internet Information Services (IIS) Manager. From the Start button select Programs > Administrative Tools > Internet Information Services Manager.
2.In the IIS Manager, select the server node on the top left under Connections
3.In the Features pane (the middle pane), double-click the Server Certificates option located under the IIS or Security heading (depending on your current group-by view).
4.From the Actions pane on the top right, select Complete Certificate Request.
5.On the Complete Certificate Request page browse to the SSL certificate file your_domain_com.cer.
6.Next, type a friendly name for the certificate in the Friendly name box, and then click OK. Something like www.chicagotech.net will do.
7.Your SSL server certificate is now installed on your server and you should see it listed in the Server Certificates view. Now you will need to configure your web site to use the certificate.

[guest]

Installing an Godaddy SSL Certificate in Microsoft Exchange Server 2010

After you enter the CSR in our online application, and once your certificate is ready for installation, you need to download all of the files we provide. You must install the intermediate and primary certificate to your Microsoft® Exchange server 2010 to complete installation. For more information see Downloading Your SSL Certificate.

Exchange server 2010 requires a Multiple Domain (UCC) Certificate to run all services securely.
To Install an SSL Certificate in Microsoft Exchange 2010

To install the intermediate certificate, click Start, and then click Run..
Type mmc, and then click OK. The Microsoft Management Console (Console1) window opens.
In the Console1 window, click File, and then select Add/Remove Snap-in. The Add or Remove Snap-ins window displays.
In the Add or Remove Snap-ins window, select Certificates, and then click Add.
In the Computer Account window, select Computer Account, and then click Next.
In the Select Computer window, select Local Computer, and then click Finish.
In the Add or Remove Snap-ins window, click OK.
In the Console1 window, click + to expand the Certificates (Local Computer) folder on the left.
Right-click Intermediate Certification Authorities, mouse over All Tasks, and then click Import.
In the Certificate Import Wizard window, click Next.
Click Browse to find the intermediate certificate file.
In the Open window, change the file extension filter to PKCS #7 Certificates (*.spc;*.p7b), select the *_iis_intermediates.p7b file, and then click Open.
In the Certificate Import Wizard window, click Next.
Select Place all certificates in the following store, and then click Browse.
In the Select Certificate Store window, select Intermediate Certification Authorities, and then click OK.
In the Certificate Import Wizard window, click Next.
Click Finish.
Click OK.
Close the Console1 window, and then click No to remove the console settings.
To install the primary certificate, click Start, click All Programs, Microsoft Exchange Server 2010, and then click Exchange Management Console.
In the Exchange Management Console, click Microsoft Exchange On-Premises, and then click Manage Databases.
Click Server Configuration.
In Exchange Certificates, select your certificate, and then, from the Actions panel on the right, click Complete Pending Request.
In the Complete Pending Request window, click Browse to locate the certificate file.
In the Open window, select All Files(*.*) as your file name extension, select your certificate (it might be saved as a .txt, .cer, or .crt), and then click Open.
In the Complete Pending Request window, click Complete.

NOTE: If you receive the error, "The source data is corrupted or not properly Base64 encoded," check the Self Signed field. If it is True, refresh console by pressing F5 on your keyboard. If it still displays True, create a new CSR and then re-key your certificate.
Click Finish.
In the Exchange Management Console, select your certificate in Exchange Certificates.
From the Actions menu, click Assign Services to Certificate.
In the Assign Services to Certificate window, select the server(s) you want to assign services to, and then click Next.
Select services you want to assign to the certificate, and then click Next.
Click Assign.
Click Finish.