Create Lets Encrypt Certificates for Exchange Server 2019 | Exchange 2019 - Part 3

In this video we're going to cover the process of how to create Lets Encrypt Certificates for Exchange Server 2019. We go over step by step, the Powershell script that is used for this task and we go over what to do to renew the certificate when it is about to expire. This script requires the POSH-ACME Powershell module and we go over installing it on your system and the basic commands that are needed.

Scripts used in this video to create Lets Encrypt SSL certs:

The entire process from start to finish can be completely automated with the script I wrote so you can set it as a scheduled task and not have to worry about renewing it manually. Let's Encrypt is also 100% free to use so a portion of this script can be used to install Lets Encrypt Certificates for free for anything you want to use it for.

This is the 3rd video in the 'Install and Configure Exchange Server 2019' series so I invite you to check out the playlist to follow along.

[x]

First off thank you for the wonderful tutorial!. I followed it to a Tee, generated and installed the cert successfully however my Exchange owa and ecp subdomains are still referencing to a old win-acme let's encrypt cert that I created prior and deleted from the Cert store

[mahamansanigarbaalhou]

Thank you for this great video.
Why you didn' run #region Information Gathering?
Which server is PAC-FS01?

[andrebarros]

For renewals on the install ssl cert on exchange server commands, I get an error that the certificate with thumbprint cant be found. Anyone run into this?

[jorgemarquez]

Hi Bud, excellent video! Just a quick question, what are the variables I need to update to use GoDaddy instead of Cloudflare for my DNS Management. I'm trying to update some of them checking the GoDaddy.PS1 script on the Module's Folder however it seems that I've been doing something wrong. Thank you in advance!

[Momo-gfiw]

Can u pls share the scripts using in these exchange tutorials there are very usefull?

[amandeepsingh]

if possible please make practical tutorial of ITIL

[knightlautrec]

Thanks for the video. Are you able to answer a question?

If I have a website (mysite.com on 123.123.123.123) and a mail server (mail.mysite.com on 321.321.321.321) am I able to use a Let's Encrypt certificate separately for that mail server? It's the same domain but they're on completely different servers and IPs. As long as I do what needs to be done on the Exch that should be fine is that correct? Edit: I should note that the website already has a certificate from another provider (not LE), the mail server is currently self-signed.

[mansur]

Hi Paul, we are running Exc 2019 Server on prem, we are facing issue with outgoing emails. incoming emails are getting through fine. Is there a way you can help me?