Search This Blog

Wednesday 14 December 2011

Exchange 2007/2010 - There is not valid SMTP Transport Layer Security (TLS) Certificate

Event Log ID 12016 is displayed in the Application Log for the MSExchangeTransport Source

Event Log Error

media_1323852410980.png

The SSL Certificate used for SMTP has expired and the event log error 12016 is logged.

Show Exchange Certificates

media_1323852456267.png

Run the EMS command Get-ExchangeCertificate to show the current certificates and the associated Services, in this case we can see two Thumbprints associated with the Service SMTP (S). Once of these has expired so we need to see which one.

Output Certificate Details to a text file

media_1323852637450.png

Use the command Get-ExchangeCertificate | fl| out-file -FilePath C:\certs.txt to export the full details to a text file.

Expired Certificate

media_1323852682298.png

Look through the text file for the certificate that has expired, in this case we can see the certificate has expired and has an Invalid Date.

Valid Certificate

media_1323852750566.png

Look through the text file for the certificate that is valid and make a copy of the Thumbprint.

Enable the Valid Certificate for use with SMTP

media_1323852870588.png

Use the command Enable-ExchangeCertificate - Thumbprint thumbprint -Services "SMTP" to enable the valid certificate

Remove the expired Certificate

media_1323852932439.png

Use the Remove-ExchangeCertificate -Thumbprint thumbprint to remove the expired certificate

Confirm the change

media_1323852950572.png

Use the Get-ExchangeCertificate command to confirm you now have the correct valid certificate associated to the SMTP Service. Restart the Exchange Transport Service to complete the change.

No comments:

Post a Comment