Hi All,
I've inherited an Environment with Lync and I can see that the Certificates on the Lync Servers in our DMZ have expired.
I did the following tasks:
Create a Certificate Request within IIS as RSA 2048 as the Cryptographic Provider.
Opened http://server/certserv and "Request a certificate."
Submit an advanced certificate request
Submit a certificate request by using a base-64-encoded CMC or PKCS #10 file...copied and pasted the cert request hash
Selected "Web Server" as the Certificate Template
Did not enter anything into the Additional Attributes box.
Downloaded the new cert file with an extension of *.cer.
Installed the Certificate on the Lync Server using the Cert MMC. I then noticed that I didn't have the "little key icon" in the Cert MMC. I surmised that meant the Private Key was installed as well and considered exportable. I could be wrong...
In short, I don't ever remember at any point during the Certificate Generation that there was the option to make the Private Key exportable.
Thank you very much for your time,
Mr Mister