Views:
There are two ways to create a new self-signed certificate:
1. the tool "MakeCert":
a) SMEX web site uses the self-signed certificate created by the tool "MakeCert" provided by Microsoft.
===cut===
makecert -r -pe -n "CN=<server name>" -b 01/06/2022 -e 01/06/2025 -eku 1.3.6.1.5.5.7.3.1 -ss my -sr localMachine -sky exchange -sp "Microsoft RSA SChannel Cryptographic Provider" -sy 12 -a sha256 -len 2048
===cut===
Reference:
https://docs.microsoft.com/en-us/windows/win32/seccrypto/makecert
b) Replace smex certificate with the new certificate:
Open Internet Information Services Manager by run "intermgr"
Navigate to Sites-> SMEX Web Site, click Bindings-> Edit, change SSL certificate to the new certificate
Then Restart Website, log on SMEX UI to see everything goes well.
 
2. powershell command: New-SelfSignedCertificate.
a) https://docs.microsoft.com/en-us/powershell/module/pki/new-selfsignedcertificate?view=windowsserver2022-ps
b) Replace PortalProtect certificate with the new certificate:
Open Internet Information Services Manager by run "intermgr"
Navigate to Sites-> PortalProtect Web Site, click Bindings-> Edit, change SSL certificate to the new certificate
Then Restart Website, log on PortalProtect UI to see everything goes well.
3. If you have another available certificate you can use his certificate to instead the self-signed certificate."
 
Keywords: Creating a new self-signed certificate in Microsoft Exchange for Scanmail for Exchange