To update the TLS Send/Receive Connector Cert


  1. Open EAC
  2. Click Servers
  3. Click Certificates
  4. Find the correct Cert, click "renew"
  5. Specify Save location, get CSR and submit
  6. When you receive the Cert back, click complete
  7. Open MMC.Msc and add Certificate/Local Computer
  8. Make sure renewed cert has key assigned (If it doesn't, run Digicert app)
  9. open cert and make a note of thumbprint (I.e. 374cd857af46661f42b4fe027a777902578c03c2)
  10. Open Exchange Management Shell
  11. Enter the following commands, with the new thumbprint


----------------------------------------------------------------------------


$cert = Get-ExchangeCertificate -Thumbprint <New Thumbprint>

$tlscertificatename = "<i>$($cert.Issuer)<s>$($cert.Subject)"


#To Replace Send Connector –


Set-SendConnector "Outbound to Office 365" -TlsCertificateName $tlscertificatename

Set-SendConnector "All Outgoing Mail" -TlsCertificateName $tlscertificatename


#To Replace Receive Connector –


Set-ReceiveConnector "HYBRIDEXCHANGE\Default Frontend HYBRIDEXCHANGE" -TlsCertificateName $tlscertificatename


-----------------------------------------------------------------------------



***IIS - Sites - Exchange Back End - Bindings - Change HTTPS Cert to new Certificate***