Exchange: Channel 36888 / 36871 error after renewing the BackEnd certificate

After renewing the Exchange backend certificate, frequent channel error messages may appear in the event log if the POP3 service of the Exchange server is used. The following two error messages may appear after the certificate has been changed: Source: Schannel Event ID: 36871 Level: Error Fatal error while creating the client credentials for TLS. The internal error status ... Read more

Exchange Server: New security updates (November 2020)

Microsoft today released new security updates for all Exchange Server versions that are still supported. The updates address a total of 3 vulnerabilities: CVE-2020-17083 | Microsoft Exchange Server Remote Code Execution Vulnerability CVE-2020-17084 | Microsoft Exchange Server Remote Code Execution Vulnerability CVE-2020-17085 | Microsoft Exchange Server Denial of Service Vulnerability As two of the vulnerabilities allow remote code execution, it is recommended to ... Read more

New Exchange Reporter version (3.8: code name Leslie)

I have just uploaded version 3.8 (code name Leslie). This is the first version that has a "code name" because Leslie (the Leslie) was kind enough to dig through the many lines of PowerShell code and found and reported some bugs. The following bug fixes are included in version 3.8: updatereport.ps1: The module showed the ... Read more

Exchange Server: New security updates (October 2020)

Yesterday, Microsoft released a new security update for Exchange Server 2013, 2016 and 2019. The update closes the vulnerability CVE-2020-16969. The vulnerability can be exploited with a specially crafted email, so the update should be installed promptly. The update is classified as "Important". Microsoft describes the vulnerability as follows: An information disclosure vulnerability exists in ... Read more

Exchange Certificate Assistant: Not a new version, but a (better) alternative (WIN-ACME)

A long time ago I updated the Exchange Certificate Assistant for the last time. The script uses POSH-ACME as a client to automatically request Let's Encrypt certificates, but there are problems with the script from time to time. However, since there is now a much better version that also supports Exchange Server (and other services), I will ... Read more

Exchange 2019: Comprehensive white paper on certificates

Originally I had given up the plan to write another white paper on the subject of "Exchange and certificates". However, there still seem to be very frequent problems with the configuration of certificates in connection with Exchange servers. There are already a few articles and scripts here, so now a comprehensive whitepaper on the subject will follow ... Read more