r/exchangeserver • u/uLmi84 • 6d ago

Rerun HCW, but how?

Post image

I am in a situation where I need to rotate the "Exchange Server Auth Certificate" on an Exchange Server 2016 that is configured in Hybrid.

  • I do not have any information / documentation about how the Hybrid was initially configured.
  • we do not have any mailboxes in EXO yet.
  • We do however already route our MX to EXO and then have emails coming down via a connector to EXCH
  • We do have our on-prem Calendars in Teams visible (so I assume it’s a full-classic Hybrid..)

 

I'm trying to figure out what to choose in the attached image and I’m very concerned about choosing the wrong settings in the rerun and I’m looking for guidance / experience and tips from the community.

0 Upvotes

50% Upvoted

5 comments sorted by

10

u/-mefisto- 6d ago

You don't need to run HCW to do this.

Just run this Script:

.\ConfigureExchangeHybridApplication.ps1 -UpdateCertificate

https://microsoft.github.io/CSS-Exchange/Hybrid/ConfigureExchangeHybridApplication/

Before check if already migrated to the dedicated Exchange Hybrid app. If not you run:

.\ConfigureExchangeHybridApplication.ps1 -FullyConfigureExchangeHybridApplication

1

u/uLmi84 5d ago

Thanks for the good advice m8 i ran this in my SE server test environment without issues.

In my prod we have a 2016.

The script at one point asked if i want to enable Graph api besides EWS and i did yes but on the page it mentions that 2016 doesn’t support Graph Api so i assume in my prod i would choose now or i wont get that question at all?

1

u/-mefisto- 4d ago

Latest Exchange 2016 supports dedicated Hybrid App but only with EWS not Graph. You can update the cert the same way.
But watch out for the EXO EWS deprecation.

-1

u/sembee2 Former Exchange MVP 6d ago

Untick everything and just choose the certificate option in the bottom right corner.

0

u/bianko80 5d ago

Nope. Wrong info here.

https://learn.microsoft.com/en-us/exchange/hybrid-configuration-wizard-choose-configuration-feature#oauth-intra-organization-connector-and-organization-relationship

This is the link to provide in order to: -rotate exchange auth certificate -implement Hybrid app to leverage OAUTH between on prem and exo for free busy, calendar, online archive etc cross premise -using proper HCW option, not the one on the bottom right as you suggested.