How to update Microsoft Exchange mail server certificate?

Question

Microsoft Exchange

Googled a lot. So until the end and did not understand where it is done.
1) https://docs.microsoft.com/ru-ru/exchange/architec...
Get-ExchangeCertificate.... and further in the text of the manual...
PowerShell writes an error, does not find such a command (??)

2 ) https://vmblog.ru/obnovit-ssl-sertifikat-exchange/
Exchange Admin Center, there is no address like https://msk-mail1/ecp/ . The microsoft exchange web mail is located at a similar address.

3) Tried it like this
https://blog.bissquit.com/mail-servers/exchange-se...
IIS Manager - Server Certificates:

There is an old, expired certificate that needs to be renewed. Clicking on the refresh button for an expired certificate opens a server selection dialog (certificate authority), I select the server and - an error, the request was received, but could not be processed. Generally the server refuses (the server "local" in the same network).

A new certificate is created without problems, the server "issues" it. But it must somehow be installed on clients, added to users' outlook. Export is not realistic, there are many computers. Where to do this in group policies is not yet clear.

How to update Microsoft Exchange mail server certificate?

Answer 1

So until the end and did not understand where it is done.

Buttons in the Exchange Admin Center (the same https://msk-mail1/ecp - because OWA and ECP go in pairs, and if you run it locally on the Exchange server, it will be something like https://localhost/ecp ) or PowerShell in Exchange Management Shell.
The certificate to be installed must be PFX.

it must somehow be installed on clients

It is not necessary to install it on clients, it is a server certificate. Clients must already have the root CA certificate and possibly the intermediate CA certificate(s) that sign the Exchange certificate

Answer 2

Get-ExchangeCertificate.... and further in the text of the manual...
PowerShell writes an error, does not find such commands

Most likely, you did not run the commands from Exchange PowerShell, but from Windows. Therefore, it gave an error. If you still decide to follow the thorny path of PowerShell, and not the GUI, as the respected Roman Bezrukov advised, then try running Add-PSSnapin Microsoft.Exchange.Management.PowerShell.SnapIn in the same PowerShell window .
And then follow the documentation.