Renewing an Exchange Server 2016 SSL Certificate

In Exchange 2016 there are two ways to generate a CSR.

• Option 1:  Using the Exchange Admin Center (EAC) GUI (recommended).
• Option 2:  Using the Exchange Management Shell .

Option 1: Create a renewal CSR using the Exchange Admin Center (EAC) GUI

1. Open the EAC and navigate to Servers > Certificates. From the Select server dropdown list, select the name of the  Exchange server that contains the SSL/TLS certificate that you would like to renew.
   
   
   
2. From the details pane, select the certificate from the list that you want to renew, and click Renew. The Renew Exchange certificate view opens
3. In the Save the certificate request to the following file field, enter the path and filename for the renewal Certificate Signing Request (CSR) file. For instance, \\FileServer10\Data\certrequest.txt. Click OK when you're done. The renewal CSR should show up in the list of Exchange certificates with a status of Pending.
4. Open the Certificate Signing Request (CSR) text file you just created in a simple text editor such as Notepad (do not open in Word). Below is an example of what your CSR will look like. You will be asked to paste the entire contents (including the BEGIN and END lines) when renewing your certificate.