On February 6, 2017, I published the first version of the certificate wizard for Exchange 2016 and Let's Encrypt. The certificate wizard simplifies the request, renewal and installation of an SSL certificate for Exchange 2016. Now there is a new version thanks to Bjoern.
Bjoern has taken the trouble to make some changes so that the certificate wizard also works with Exchange 2010 and Exchange 2013. Furthermore, thanks to Bjoern's changes, it is now also possible to run the script several times a day. However, frequent execution of the script should be done with caution, as there are limits set by Let's Encrypt:
https://letsencrypt.org/docs/rate-limits/
If the ACMESharp module is not already installed, version 0.8.1 will now be installed by the script. The version of the ACMESharp module is somewhat older, but the HTTP validation by Let's Encrypt still works with it.
There are still a few requirements for the assistant, which are described here:
https://www.frankysweb.de/exchange-2016-zertifikatsassistent-fuer-lets-encrypt/
- The Exchange server must be publicly accessible at port 443 and 80
- PowerShell IIS module (web administration)
- Exchange Management Shell
- ACMESharp PowerShell Client (will be installed if not available)
The current version of the certificate wizard can be downloaded here:
The scheduled task renews the certificate 4 days before it expires. You should therefore check whether the certificate has been renewed 3 days before it expires.
I have also planned a complete revision of the script, but unfortunately I haven't gotten around to it yet. For now, an update for the Exchange Reporter is in the starting blocks. Suggestions for improvement and requests are welcome by e-mail.
Many thanks to Bjoern!
Update 10.09.17Edwin van Brenk has translated the script into English, thank you very much! Link see below.
Edwin van Brenk has translated the script to English language. Many thanks for your work. You will find the English version here:
Update 26.02.2018: A completely revised version can be found here (Beta):