http://www.msexchange.org -------------------------------------------------------You don't generate the CSR under IIS. You generate it from an Exchange Management Shell, using the New-ExchangeCertificate PowerShell cmdlet. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com -----Original Message----- From: exchangelist-bounce@xxxxxxxxxxxxx [mailto:exchangelist-bounce@xxxxxxxxxxxxx] On Behalf Of Harondel J. Sibble Sent: Thursday, February 11, 2010 2:02 PM To: exchangelist@xxxxxxxxxxxxx Subject: [ExchangeList] Re: sbs 2008 ssl cert replacement - how to do http://www.msexchange.org ------------------------------------------------------- Hmm, is that something new in IIS7? Under 6 it won't let you generate a new csr until you remove the existing cert... Or is this a function of having to use the Exchange 2007 console to install the cert? Which is the correct way to install a new cert on Ex2k7/IIS7? As I noted. I've seen it suggested both ways as "THE" way to do it. On 11 Feb 2010 at 13:54, Michael B. Smith wrote: > http://www.msexchange.org > -------------------------------------------------------You don't need > to remove the old cert before you generate the CSR for the new cert. > They'll have different thumbprints even if they are otherwise > identical, and the thumbprint is what Exchange (and the Windows > certificate > module) cares about. -- Harondel J. Sibble Sibble Computer Consulting Creating Solutions for the small and medium business computer user. help@xxxxxxxxx (use pgp keyid 0x3AD5C11D) http://www.pdscc.com (604) 739-3709 (voice) ------------------------------------------------------- List Archives: //www.freelists.org/archives/exchangelist/ MSExchange Newsletter: http://www.msexchange.org/pages/newsletter.asp MSExchange Articles and Tutorials: http://www.msexchange.org/articles_tutorials/ MSExchange Blogs: http://blogs.msexchange.org/ ------------------------------------------------------- Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------- To unsubscribe visit http://www.msexchange.org/pages/exchangelist.asp Report abuse to listadmin@xxxxxxxxxxxxxx ------------------------------------------------------- List Archives: //www.freelists.org/archives/exchangelist/ MSExchange Newsletter: http://www.msexchange.org/pages/newsletter.asp MSExchange Articles and Tutorials: http://www.msexchange.org/articles_tutorials/ MSExchange Blogs: http://blogs.msexchange.org/ ------------------------------------------------------- Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------- To unsubscribe visit http://www.msexchange.org/pages/exchangelist.asp Report abuse to listadmin@xxxxxxxxxxxxxx