http://www.msexchange.org/articles_tutorials/exchange-server-2007/management-administration/managing-exchange-certificates-part2.html
the main points here is
gpmc.msc
create a GPO, in computer node ...windows settings .... security settings ... public key policies ...
Showing posts with label self-signed certificate. Show all posts
Showing posts with label self-signed certificate. Show all posts
Saturday, April 17, 2010
Monday, April 5, 2010
create exchange 2010 self-signed certificate again
New-ExchangeCertificate -PrivateKeyExportable $True -Services IMAP, POP, IIS, SMTP -SubjectName cn=remote.myooophm.com
$file = Export-ExchangeCertificate -Thumbprint xxxmythumbprinthereyyyyy -BinaryEncoded:$true -Password (Get-Credential).password
Set-Content -Path "c:\certificates\mycert.pfx" -Value $file.FileData -Encoding Byte
you can deploy the selft-signed cert via group policy
$file = Export-ExchangeCertificate -Thumbprint xxxmythumbprinthereyyyyy -BinaryEncoded:$true -Password (Get-Credential).password
Set-Content -Path "c:\certificates\mycert.pfx" -Value $file.FileData -Encoding Byte
you can deploy the selft-signed cert via group policy
Monday, March 15, 2010
date/clock not right and certificate problem on the HP ML 100 G6
not quite sure why the date/clock went back to 1987, hence the certificate xpired in 1989.
the clock reset may be due to the smartcd being run.
anyway, I have to get clock corret. the do my favorite
net time /querysntp
by default, it will be time.windows.com
net time /setsntp: localsntpserver
then in certificate authority, generate a new one.
however, the proper way to do this, is to run fix network wizard, the wizard will detect expired certs, and put things right.
the clock reset may be due to the smartcd being run.
anyway, I have to get clock corret. the do my favorite
net time /querysntp
by default, it will be time.windows.com
net time /setsntp: localsntpserver
then in certificate authority, generate a new one.
however, the proper way to do this, is to run fix network wizard, the wizard will detect expired certs, and put things right.
Friday, January 29, 2010
Hosted Exchange 2010 - continued
here are some useful links
this link refers to generating self-created cert for outlook anywhere.
http://www.kirkouimet.com/blog/2008/06/generate-a-self-signed-certificate-in-exchange-server-2007-to-be-used-for-outlook-anywhere-on-outlook-2007/
I got an error exporting it, this one didn't work for me
Export-ExchangeCertificate -Thumbprint C0120462272A19141382FEB24008A50BA7AAD31D -Path C:\Certificate.pfx -Password:(Get-Credential).password
The MS technet has a couple of good cmdlets
$file = Export-ExchangeCertificate -Thumbprint C0120462272A19141382FEB24008A50BA7AAD31D -BinaryEncoded:$true -Password (Get-Credential).password
Set-Content -Path "c:\certificates\exch01.pfx" -Value $file.FileData -Encoding Byte
this link refers to generating self-created cert for outlook anywhere.
http://www.kirkouimet.com/blog/2008/06/generate-a-self-signed-certificate-in-exchange-server-2007-to-be-used-for-outlook-anywhere-on-outlook-2007/
I got an error exporting it, this one didn't work for me
Export-ExchangeCertificate -Thumbprint C0120462272A19141382FEB24008A50BA7AAD31D -Path C:\Certificate.pfx -Password:(Get-Credential).password
The MS technet has a couple of good cmdlets
$file = Export-ExchangeCertificate -Thumbprint C0120462272A19141382FEB24008A50BA7AAD31D -BinaryEncoded:$true -Password (Get-Credential).password
Set-Content -Path "c:\certificates\exch01.pfx" -Value $file.FileData -Encoding Byte
Subscribe to:
Posts (Atom)
