Cadzow Knowledgebase

Contact Us

Site Search

Remote Support

Print Friendly

Outlook: Expired Security Certificate

NB. This article is intended for a highly technical audience.

Outlook prompts: The Security certificate has Expired or is not yet valid. This occurs when the default certificate created by Exchange 2007 expires (by default a year later). This can be resolved by creating a new certificate using Exchange Management Shell in elevated mode.

  1. First, determine a list of the certificates in use:


  2. Next, determine which one has expired:

    Get-ExchangeCertificate | select-object Thumbprint, NotAfter

    (The Thumbprint shown will not be the full thumbprint due to column formatting.)

    Note the Subject of the expired certificate from the first command, eg something like

  3. Create a new certificate:

    new-exchangecertificate -SubjectName -services:IIS,SMTP,POP,IMAP

    (Answer Y when prompted.)

  4. Delete the expired certificate(s):

    remove-exchangecertificate -thumbprint <thumbprint from step 1>

Note: if you operate Outlook Web Access or Outlook Anywhere on a binding aside from the default of via port 443, you may need to assign the new certificate to that binding in Internet Information Services.

See Also

Copyright © 1996-2023 Cadzow TECH Pty. Ltd. All rights reserved.
Information and prices contained in this website may change without notice. Terms of use.

Question/comment about this page? Please email