If you are doing to a Cross forest move between two Exchange 2010 Forests
In order to authenticate between Exchange 2010 forests – using a Self Signed Certificate
Will be Exporting the Target Exchange Server Certificate and import it on the Source Exchange Server
Vice Versa
Will be Exporting the source Exchange Server Certificate and import it on the Target Exchange Server
Its Pretty simple
Am Running this on the Source Server
Start – Run – MMC – Click on Add/Remove Snap in
Add Certificates
Choose Computer Account
Choose Local Computer
Click OK
Now being in the Source Exchange Server,
Am Exporting the Certificate from the Certificates Container
Click Next
Choose Next
Now Getting the Source Exchange Server Cert file to the Target Exchange Server
Start – Run – MMC – Click on Add/Remove Snap in
Add Certificates
Choose Computer Account
Choose Local Computer
Right Click on Certificates – All Tasks – Import
Choose the File
Choose Trusted Root Certification
Do the Same Process And Import to Certificates on the Personal Container
Now Source Cert has been Exported and imported to the Target Exchange Server
Now
Do the Same Process vice versa
Export the Target Exchange Cert and imported to the Source Exchange Server
Now Both Exchange 2010 forests can authenticate without any issues , While a cross forest move
Worked perfectly! Thanks for your post
You are welcome James.
I have imported the self-signed certs between all CAS servers in each org, and still get the error-
new-MoveRequest : The call to ‘https://irv-edc-cas04.corp.mycompany.com/EWS/mrsproxy.svc’ failed. Error details: Could not establish trust relationship for the
SSL/TLS secure channel with authority ‘irv-edc-cas04.corp.mycompany.com’. –> The underlying connection was closed: Could not establish trust relationship for the
SSL/TLS secure channel. –> The remote certificate is invalid according to the validation procedure..
Any thing I can check to verify? I am already running the new-moverequest cmdlet in verbose mode.
Exactly what I needed, thanks!
Happy for you.