How to replace a certificate in Exchange 2013?

Question

Microsoft Exchange

We have:
- a DAG group of two Exchange 2013 servers
- a certificate server based on Windows 2012
The essence of the problem
I'm trying to replace a self-signed certificate with another one, according to the instructions: instruction
After I complete step 22 - the certificate simply disappears from the list, and it's impossible to bind it to services .
If you go to the server itself through the snap-in, then the certificate is there in the list.
Tell me how to defeat this trouble? How can I bind it to services?

Answer 1

It probably disappears because the certificate was issued to the CA not as a template WebServer.
It is necessary to release exactly with the WebServer template if CA Enterprise:
certreq -attrib "CertificateTemplate:webserver" –submit myExchangeCert.req