Andy Kemp Consulting

Demo · Exchange Certificate Manager

Exchange certificates, requested, deployed and checked in one place

Watch the real Windows app on a made-up Exchange organisation: every certificate on every server, health checks that catch the Auth certificate and pinned hybrid connectors, requests, PFX import, deployment and Let's Encrypt. Then click through each screen yourself.

The real Exchange Certificate Manager screens, captured on a made-up Contoso organisation. No sound.

What the walkthrough shows

Each one is in the screen tour too, with what it does.

  1. Connect as youKerberos to any Mailbox server, from an Exchange server or an admin machine.
  2. Every certificate, every serverDays left, issuer, where it is installed and what each server uses it for.
  3. Health checksExpiry, the Exchange Auth certificate, URL coverage and connectors pinned to old certificates.
  4. Request or importCSRs with the names read from Exchange, or a PFX checked before anything changes.
  5. Make every server matchComplete or import once, then copy and assign everywhere with a summary first.
  6. Let's EncryptHTTP through IIS on every server or DNS for wildcards, renewed every night.

Click through every screen

It talks to Exchange, so it can't run in a browser. The tour is every screen of the real app, captured with a made-up Contoso organisation, with what each one does. Nothing here connects to anything.

  • Every screen of the app
  • Captured from the real app with made-up data
  • Read what each one does