{"id":242,"date":"2013-01-27T03:32:36","date_gmt":"2013-01-27T10:32:36","guid":{"rendered":"https:\/\/www.netometer.com\/blog\/?p=242"},"modified":"2025-10-21T17:46:12","modified_gmt":"2025-10-22T00:46:12","slug":"how-to-generate-exchange-2010-self-signed-multiple-domain-certificate","status":"publish","type":"post","link":"https:\/\/www.netometer.com\/blog\/?p=242","title":{"rendered":"How to Generate Exchange 2010 Self Signed Multiple Domain Certificate"},"content":{"rendered":"

In this step-by-step video<\/strong><\/a>, we demonstrate how to replace the default Single Domain, Exchange 2010 self-signed certificate (or an expired one) with a self-signed multiple domain (UCC) certificate.<\/p>\n

\"Screencast:<\/a><\/p>\n

In step1 of the Screencast, we check the existing certificates on our Exchange 2010 CAS and generate a new self-signed, Exchange 2010 Multiple Domain certificate:<\/p>\n

Step 1 – generate self-signed UCC\"\" \"\"
\nStep 1: Generate a new self-signed Exchange 2010 Multiple Domain certificate.<\/span> <\/a><\/p>\n

The new certificate is not trusted both by domain (local) and remote clients. In step2 we export the generated self-signed UCC with its public key:
\nStep 2 – export certificate\"\" \"\"
\nStep 2: Export the generated self-signed UCC with its public key.<\/span> <\/a><\/p>\n

Then, we create a new Group Policy, and add the certificate as a trusted root certificate to all domain clients:
\nStep 2 – create GPO\"\" \"\"
\nStep 2: Create a GPO to add a trusted certificate to Domain Clients.<\/span> <\/a><\/p>\n

In step 3, we publish the certificate to the web server running OWA:
\nStep3: Publish Self-signed UCC to OWA site\"\" \"\"
\nStep 3: Publish Self-signed UCC to OWA web site.<\/span> <\/a><\/p>\n

Then we download and install it on a remote client. The new self-signed UCC certificate is tested by running OWA and configuring Outlook Anywhere on the remote client:
\nStep3: Import Self-signed UCC Public Key\"\" \"\"
\nStep 3: Import Self-signed UCC Public Key.<\/span> <\/a><\/p>\n

Tweet #Exchange2010<\/a> Follow @netometer<\/a>
\n