{"id":418,"date":"2016-11-11T15:54:12","date_gmt":"2016-11-11T14:54:12","guid":{"rendered":"http:\/\/www.michael.tassati.at\/?p=418"},"modified":"2016-11-11T15:54:47","modified_gmt":"2016-11-11T14:54:47","slug":"update-send-connector-ssl-certificate-for-hybrid-configuration-the-texmx-record","status":"publish","type":"post","link":"https:\/\/www.michael.tassati.at\/?p=418","title":{"rendered":"Update Send Connector SSL Certificate for Hybrid Configuration \u2013 The TexMX Record"},"content":{"rendered":"
\nRecently had a customer with an Exchange 2013 Hybrid config require updating an expired SSL certificate.\u00a0 When they imported the new certificate and assigned it SMTP services, mail flow from on-premises to Office 365 stopped.<\/p>\n

This was because the on-premises send connector to Office 365\u00a0was still configured to look for that expired certificate (which had also been deleted already).<\/p>\n

The fix was to perform the following:<\/p>\n

    \n
  1. Open Exchange Management Shell on the on-premises Exchange server<\/li>\n
  2. Run Get-ExchangeCertificate,\u00a0and note the Thumbprint of the correct certificate to be used.<\/li>\n
  3. Run $cert = Get-ExchangeCertificate -Thumbprint <thumbprint><\/li>\n
  4. Set a new variable and assign it the concatenated values of the Issuer and Subject values of the certificate (must also include <I> and <S> before each field):
    \n$TLSCert = (\u2018<I>\u2019+$cert.issuer+'<S>\u2019+$cert.subject)<\/li>\n
  5. Update the send connector with the new values
    \nSet-SendConnector -Identity \u201cSend Connector Name\u201d -TLSCertificateName $TLSCert<\/li>\n<\/ol>\n

    After completing this, any queued mail destined for the Office 365 tenant should begin flowing<\/p>\n<\/div>\n

    Quelle: Update Send Connector SSL Certificate for Hybrid Configuration \u2013 The TexMX Record<\/a><\/em><\/p>\n","protected":false},"excerpt":{"rendered":"

    Recently had a customer with an Exchange 2013 Hybrid config require updating an expired SSL certificate.\u00a0 When they imported the new certificate and assigned it SMTP services, mail flow from on-premises to Office 365 stopped. This was because the on-premises send connector to Office 365\u00a0was still configured to look for that expired certificate (which had … Update Send Connector SSL Certificate for Hybrid Configuration \u2013 The TexMX Record<\/span> weiterlesen →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/www.michael.tassati.at\/index.php?rest_route=\/wp\/v2\/posts\/418"}],"collection":[{"href":"https:\/\/www.michael.tassati.at\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.michael.tassati.at\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.michael.tassati.at\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.michael.tassati.at\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=418"}],"version-history":[{"count":2,"href":"https:\/\/www.michael.tassati.at\/index.php?rest_route=\/wp\/v2\/posts\/418\/revisions"}],"predecessor-version":[{"id":420,"href":"https:\/\/www.michael.tassati.at\/index.php?rest_route=\/wp\/v2\/posts\/418\/revisions\/420"}],"wp:attachment":[{"href":"https:\/\/www.michael.tassati.at\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=418"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.michael.tassati.at\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=418"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.michael.tassati.at\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=418"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}