Wednesday, December 18, 2013

Exchange SSL renewal - "pending certificate signing request"

After getting a renewal for exchange server and doing the "complete pending request" the certificate still shows in the EMC with "This is a pending certificate signing request (CSR)."  This is after the completing successfully with the crt downloaded from the cert authority.

Opening MMC certs and looking at the cert shows the cert is missing it's private key and in my case also the friendly name didn't carry over.
Open the the certificate from the CA and on the details tab find the thumbprint field and copy it to your clipboard.
Now run the following command from a command prompt:
certutil -repairstore My ""

In addition, in the MMC you can right click your cert and go to properties to assign the friendly name.

No comments:

Post a Comment