Updating SSL Certificate (2024)

Hello! I am trying to update our expiring SSL certificate and here is what I am following to do so:

To Install an Intermediate Certificate in Microsoft Exchange Server 2016

1. ClickStart, and then clickRun....
2. Typemmc, and then clickOK. The Microsoft Management Console (Console1) window opens.
3. In theConsole1window, clickFile, and then selectAdd/Remove Snap-in.
4. In theAdd or Remove Snap-inswindow, selectCertificates, and then clickAdd.
5. In theComputer Accountwindow, selectComputer Account, and then clickNext.
6. In theSelect Computerwindow, selectLocal Computer, and then clickFinish.
7. In theAdd or Remove Snap-inswindow, clickOK.
8. In theConsole1window, click+to expand theCertificates (Local Computer)folder on the left.
9. Right-clickIntermediate Certification Authorities, mouse overAll Tasks, and then clickImport.
10. In theCertificate Import Wizardwindow, clickNext.
11. ClickBrowseto find the intermediate certificate file.
12. In theOpenwindow, change the file extension filter toPKCS #7 Certificates (*.spc;*.p7b), select the*_iis_intermediates.p7bfile, and then clickOpen.
13. In theCertificate Import Wizardwindow, clickNext.
14. SelectPlace all certificates in the following store, and then clickBrowse.
15. In theSelect Certificate Storewindow, selectIntermediate Certification Authorities, and then clickOK.
16. In theCertificate Import Wizardwindow, clickNext.
17. ClickFinish.
18. ClickOK.
19. Close theConsole1window, and then clickNoto remove the console settings.

1. To Install an SSL Certificate in Microsoft Exchange Server 2016
   1. Log in to theExchange Admin Center.
   2. From the left menu, selectServers, and then clickCertificates.
   3. Select your certificate (it has a “Pending request” status), and then clickComplete.
2. ForFile to import from, enter the certificate file path we provided (such as\\server\folder\coolexample.crt), and then clickOK. Exchange installs your certificate.
3. In theCertificatessection, select your certificate again (the status changed to “Valid”), and then clickEdit(pencil icon).
4. ClickServices, select the services to which the certificate applies (SMTP, UM, UM call router, IMAP, POP, and/or IIS), and then clickOK. Your certificate is now ready to use with Exchange 2016.

The issue I get is at the "pending certificate" does not show up in the list in EAS, just the original certificate still showing "expires on" as shown in the image. I have tried several times, verified that I am downloading the Exchange SLL, verified that it is for this particular server, restarted IIS etc etc. The server is on prem physical Windows 2016 Exchange server and there is only only one.

Ideas?

Thanks!