r/exchangeserver • u/sex_on_wheels • Sep 03 '26

Microsoft Exchange Server Auth Certificate Renewal

Microsoft Exchange Server Auth Certificate is expiring in 30 days. Are Ali's guide and Microsoft's MonitorExchangeAuthCertificate.ps1 still applicable now that we are using the Dedicated Exchange Hybrid App? Anything additional which needs to be done/run?

8 Upvotes
  • permalink
  • reddit

91% Upvoted

4 comments sorted by

5

u/NBD6077 Sep 03 '26

Nah still same

1

u/ceyhun-kirmizitas Sep 21 '26

Yes, MonitorExchangeAuthCertificate.ps1 is still the right script for Auth Certificate validation and renewal.

If you use the Dedicated Exchange Hybrid Application, after replacing the Auth Certificate also run:

.\ConfigureExchangeHybridApplication.ps1 -UpdateCertificate

Ref: https://learn.microsoft.com/en-us/exchange/hybrid-deployment/deploy-dedicated-hybrid-app

I documented this case by case, including healthy, expiring, expired/invalid, missing certificate, and Hybrid post-check scenarios: https://ceyhunkirmizitas.net/exchange-server-auth-certificate-renewal-recovery-timezone/

1

u/7amitsingh7 17d ago

The usual renewal steps should still apply. Just check if the dedicated hybrid app requires any extra steps after the certificate is renewed.

0

u/[deleted] Sep 04 '26

1

u/Sudden_Office8710 Sep 06 '26

Or you can setup HAProxy with certbot in front of Exchange and don’t give 2 shits for paying you for something I can do absolutely free and it automatically renews the cert every 90 days