Exchange 2007 uses SSL certificates extensively across the IMAP, POP, IMAP, UM and IIS services. I assumed that adding an SSL certificate to one of the Domain Controllers would propogate that certificate across all the controllers. I guess it makes sense that I was wrong, SSL certificates aren’t something you want spread or activated widely. If you do need to move or copy the certificate across servers though, it is a simple 3 step process in the Exchange shell:
1) Export the certificate from the original server:
Export-ExchangeCertificate -Thumbprint 5113ae0233a72fccb75b1d0198628675333d010e -BinaryEncoded:$true -Path c:\certificates\export.pfx -Password:(Get-Credential).password
http://technet.microsoft.com/en-us/library/aa996305.aspx
2) Import the certificate into the new server:
Import-ExchangeCertificate -Path c:\certificates\export.pfx -Password:(Get-Credential).password
http://technet.microsoft.com/en-us/library/bb124424.aspx
3) Enable the new certificate:
Enable-ExchangeCertificate -Thumbprint 5113ae0233a72fccb75b1d0198628675333d010e -Services “POP, IMAP”
http://technet.microsoft.com/en-us/library/aa997231.aspx
Done!
Ok I don’t want to sound like an MS Fanboi, but there are actually a few cool things Microsoft related happening with me at the moment.
Skydrive is a very cool new file storage service from Microsoft. Really simple, you get 5GB of storage space and can upload any file smaller than 50MB. Sounds perfect for a “My Docs” backup system? The only catch is that there is no shell extension or decent folder upload tool yet. They do however have a nice drag+drop multi-file upload tool, which I guess will do for now. I would love to see a more integrated tool that actually backed your “My Docs” up for you, but my guess that is hidden somewhere in the greater Windows Live skunkworks for now.
Yes, I am migrating my servers at home to the latest and greatest MS enterprise offerings. This also means going to Windows 2008 x64, which is fine since I have been an AMD fanboi for some time, but it would have been nice of them to make the migration a little easier! I know hardware is cheaper than software these days, but it would be nice to be able to easily upgrade Exchange from 2003 to 2007 without having to have a spare x64 machine lying around. Anyway it is all underway, so keep an eye on my Netcraft page.
Well it has been a while since i have done any updates! I have been busy working at Windeyer Dibbs Solicitors . I designed that web site and also did all the setup for the web and DNS servers. (If you don’t believe me check the web server version …:-) ). The next thing that i will post is how i setup horde and imp to work with an exchange server. Firstly i just have to get Turba working (not easy!). I may also do some more rack conversions soon!