This may be slightly off topic, but am looking for some help with exchange gurus:
BTW - we have NOT installed the Feb SU since restoring our exchange server from a failed WSUS update.
We are having to renew our certificates for the first time since installing CU23 and having to do this via Powershell CLI now that the option is removed from the EAC.
We are having problems generating the CSR where it takes the PrivateKeyExportable value to $true.
We are following the official documentation from here: https://learn.microsoft.com/en-us/exchange/architecture/client-access/renew-certificates?view=exchserver-2016
Exchange server 2016 CU23 - Version 15.1 (Build 2507.17)
We have tried both incarnations below:
$txtrequest = Get-ExchangeCertificate -Thumbprint XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX | New-ExchangeCertificate -GenerateRequest -PrivateKeyExportable:$true
$txtrequest = Get-ExchangeCertificate -Thumbprint XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX | New-ExchangeCertificate -GenerateRequest -PrivateKeyExportable $true
However when we look at the pending request the value is still False:
PrivateKeyExportable : False
I have until the end of March to apply new certificates.
Please can somebody message me direct if they do not want to post a reply here: email address removed for privacy reasons
If they can help with instructions it is much appreciated.