
Question on renewing self-signed cert
Good morning Reddit!
First things first - I'm mostly clueless when it comes to exchange. Boss kind of threw it in my lap and said take care of it, so I'm trying to pick things up while keeping everything else in our network from catching on fire. Anyway, my question...
I'm in the process of updating an on-prem/isolated installation of Exchange 2019 CU15 to SE (2 servers at same site in a DAG). Last week I updated from CU11 to CU15, and am giving it a couple days to make sure nothing breaks before going to SE. Well over the weekend the built-in self-signed Microsoft Exchange Server Auth Certificate expired. For now I'm not seeing any issues. SMTP is assigned to this cert, but is also assigned to another cert that is still valid. I was going through some documentation that says that in CU15 and newer I can just click the renew button from within EAC rather than renewing from the shell console. However, it does state that renewing a cert could remove it from the default website/exchange back end bindings. Took a look at my bindings, and neither are using this built-in cert. That being the case, should I be able to just click renew and go about my day without worrying about anything else? Is there something else I should check before renewing? Thanks in advance!
Edit: added some more details