Exchange Auth Certificate Expiry

[ITGURU]

Come in today to be advised that that OWA on exchange 2016 isn't working with the following:

 

X-OWA-Error Microsoft.Exchange.Diagnostics.ExAssertException

X-OWA-Version 15.1.1415.7

 

I discovered the 'Microsoft Exchange Server Auth Certificate' expired yesterday.

 

From ECP i've renewed the certificate so shows for another 5 years , rebooted both servers but still getting the same issue when users login.

 

As the certificate had expired, am i missing a step to get OWA working again?

 

Outlook clients are continuing to work as normal.

 

Thanks.

[howartp]

Ours is due next week, on Exchange 2010.

 

My notes say:

 

Enable-ExchangeCertificate -Thumbprint 0123456789ABCDEF0123456789ABCDEF01234567 -Services "SMTP, IIS, POP, IMAP" -DoNotRequireSSL

Not sure if that's same for Exchange 2016.

[3s-gtech]

If you open the Certificates view under Servers, double-click on the new cert, then select Services, will it let you add IIS and Save? I normally do this with a script as I use Let's Encrypt certificates but it may be doable in ECP for you.

[ITGURU]

If you open the Certificates view under Servers, double-click on the new cert, then select Services, will it let you add IIS and Save? I normally do this with a script as I use Let's Encrypt certificates but it may be doable in ECP for you.

it's not the Standard SSL certificate as the expires nest year so this one doesn't need to be assigned to IIS...?

[3s-gtech]

Woops, you're right. That's only on SMTP for me. Have you seen: https://social.technet.microsoft.com/wiki/contents/articles/34914.exchange-troubleshooting-federation-or-auth-certificate-not-found.aspx

[ITGURU]

resolved by this guide.. https://byronwright.blogspot.com/2018/05/expired-microsoft-exchange-server-auth.html as it had expired.