microsoft / microsoft/CSS-Exchange
[Feature Request] script to verify TLS Certificate configuration on Exchange On-prem Servers
@shasagar is already working on this.
Since Apr 24, 2025.
- Dominant language
- PowerShell
- Stars
- 1.3k
- Forks
- 395
- Avg merge
- 14h 7m
- Merged PRs (30d)
- 5
Description
Is your request related to a problem? Please describe.
Customers often struggle to understand how exchange services select certificates to initiate TLS communication. This lack of knowledge can lead to email outages shortly after renewing their certificates.
Describe The Request
I have developed a code that enables customers to perform essential checks and identifies necessary adjustments.
https://github.com/shasagar/TlsCertificateVarification/blob/main/TLSCertificateVerification.ps1
Additional context
The script has been tested in the lab environment, which includes the following servers:
4 Mailbox Servers [2 Exchange 2013 / 1 Exchange 2016 / 1 Exchange 2019]
1 Edge Server [Exchange 2019]
2 Domain Controllers
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.