Tuesday, May 28, 2013

Renewing an Exchange 2010 Certificate from Go Daddy

When you use the Exchange Management Console for Exchange Server 2010 to generate a certificate renewal request, the format used is not compatible with Go Daddy. The EMC provides some sort of binary request. Go Daddy expects a standard text-based renewal request.

You can use this process instead:
  1. Perform the certificate renewal on the Go Daddy web site and select the option to  reuse the existing CSR. If you do this then you do not need the renewal request from Exchange.
  2. Download the approved certificate in zip format and extact it to obtain the .crt file.
  3. Use IIS Manager (at the server node) to complete a certificate request. Provide the .crt file and a friendly name that you recognize. Note that .crt files are not displayed by default when browsing for the file.
  4. Use the Exchange Management Console to assign services to your renewed certificate.
And my best recommendation for avoiding this process is using multi-year certificates. And remember to use the discount codes in the Go Daddy spam messages. Typically you can get about 20% off.

Posted by at

6 comments:

  1. AnonymousFebruary 7, 2017 at 9:50 AM

    Fantastic post, this helped bundles.

    ReplyDelete
  2. AnonymousJune 13, 2018 at 5:20 AM

    Thanks a lot!

    Shame on Go Daddy support. They told me:

    1. Just apply. I told them that I have renew CSR. How to apply? It's not accepting.

    2. Then, they told me that they don't know about every messaging system. What they mean that they don't

    know the most famous messaging system in the world?

    3. Then, they told me to apply new CSR. I have about 200 domains and all domains are not under my control.

    So, I had to wait for all domain owners to add TXT record to authorize for certificate.

    4. Then, they told me to do nothing. The certificate will auto renew. At this moment, I was very angry and

    found this website.

    Thanks a lot!

    ReplyDelete
  3. UnknownNovember 20, 2018 at 8:52 AM

    This is the set of instructions GoDaddy needs to have on their site for certificates that haven't been re-keyed. The fingerprint is the same! Just the dates are updated. Don't make me start the process from scratch! This is definitely the correct way to Renew an Exchange 2010 certificate for GoDaddy. Thanks!

    ReplyDelete
  4. AnonymousJanuary 2, 2019 at 4:39 PM

    By far the simplest and easiest solution to a Exchange 2010 Godaddy SSL renewal. Thanks so much for posting. So glad I found your page.

    ReplyDelete
  5. AnonymousJuly 2, 2019 at 1:04 PM

    Thank you for this. Many many search for Renewing an Exchange 2010 cert, which just lead to complicated steps and generating a new CSR, etc., which didn't need to be done. This worked perfectly, and was extremely simple.

    ReplyDelete
  6. AnonymousJuly 16, 2019 at 3:00 PM

    This method was the best. Thank you! Why this is not widely distributed as the preferred, simplest, most effective way of replacing an expired GoDaddy Cert on Exchange 2010, I haven't the foggiest?

    ReplyDelete

Subscribe to: Post Comments (Atom)