Скрипт для получения сертификата Let's Encrypt для Exchange Server

Скачать и установить .Net FrameWork 4.7.2 и выше
Скачать WinAcme и распаковать в C:\LetsEncrypt.
Сохранить скрипт в папку C:\LetsEncrypt с расширением ps1 и запустить его от имени администратора. Пример: powershell.exe -File C:\LetsEncrypt\MyScript.ps1

#Requires -RunAsAdministrator
#Requires -Version 5

$WinACMEFile="C:\LetsEncrypt\wacs.exe"

$DefaulServerName='mail.example.com'
$DomainList="$DefaulServerName,autodiscover.example.com,"
$DomainList+=($env:COMPUTERNAME).ToLower()+'.'+($env:USERDNSDOMAIN).ToLower()

$param='--target manual '
$param+="--host $DomainList "
$param+="--certificatestore My "
$param+='--installation iis,script '
$param+='--installationsiteid 1 '
$param+='--script "./Scripts/ImportExchange.ps1" '
$param+="--scriptparameters `"'{CertThumbprint}' 'IIS,SMTP,IMAP' 1 '{CacheFile}' '{CachePassword}' '{CertFriendlyName}'`""

cd $LetsEncryptFolder
Start-Process -FilePath $WinACMEFile -ArgumentList $param -NoNewWindow -Wait

Considering updating your Domain functional level from Windows 2003? Read this!

The Exchange TeamFebruary 13, 20158

• 0
• 0

---

Now that Windows Server 2003 end of life (July 14th, 2015) is on the horizon, many customers are updating their Active Directory (AD) Domain Controllers (DC) from 2003. The first item to consider is which Windows Server Operating System (OS) you will be moving to for your DC’s. There are several options to consider today: 2008, 2008R2, 2012, or 2012R2 operating systems. However, no matter which newer OS you move your DC’s to, coming from 2003, the krbtgt account will reset its’ password when you update the Domain Functional Level (DFL), which is the concern that could break Exchange.