Do I even need a federation certificate?

I’m in the process of migrating our Exchange 2010 to Exchange 2016, which is going smoothly, except for one issue, which I just can’t seem to find an answer to.

The 2010 Exchange had an expired Federation certificate, this of course was migrated to the 2016 Exchange automatically. And expectedly both servers are complaining it has expired. However, we don’t have a trust with any other organization, so is this even necessary?

If I execute the Powershell command,

Get-FederatedOrganizationIdentifier | Format-List AccountNamespace,Domains

I seem to get nothing,

AccountNamespace :

Domains :

I’ve read about deleting the Trust and recreating it as I can’t renew the certification once it has expired. If nothing else to just shut the server up.

Answer

This expired certificate would not function anymore. You can feel free to delete it.

If any service requires such certificate, just issue a new one.

Attribution
Source : Link , Question Author : Canadian , Answer Author : Sue.J

Leave a Comment