ECC Certificates in...
 
Notifications
Clear all

ECC Certificates in Exchange

2 Posts
2 Users
0 Reactions
1,990 Views
(@sfasshauer)
New Member
Joined: 2 years ago
Posts: 1
Topic starter  

Hello Forum,

I am currently trying to import a public certificate on an Exchange 2019.
The import command does not show any errors. However, the new certificate is not displayed with "Get-ExchangeCertificate" or in the ECP.
However, it is visible and valid in the local certificate store.
When I try to activate the certificate with "Enable-ExchangeCertificate -Thumbprint xxxx -Services....", I get the error:
"The certificate with the fingerprint 'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx' was found, but is not valid for use with Exchange Server (reason: KeyAlgorithmUnsupported)."

The new certificate has the public key "ECC (256 bits)", i.e. "ECDSA" / The old, still valid certificate has "RAS (4096 bits)" otherwise the same.

After initial research, I found that Exchange does not have any ECDSA certificates are supported. Is there any way to make this possible?

Thank you


   
Quote
(@bratak)
Eminent Member
Joined: 3 years ago
Posts: 14
 

I have a similar problem, also an ECC certificate. Exchange 2016 is not supposed to support it, but Exchange 2019 is supposed to support it. But I also get the message "KeyAlgorithmUnsupported" on an Exchange 2019.

Is there any way to activate this? That ECC certificates are supported?


   
ReplyQuote

Share: