If you just updated your SSL Cert (and it looks as though it is correctly installed) but both OWA and ECP have broken, you’re going to need to associate the roles with the SSL Cert. Don’t both to do this through IIS, just do this instead:
- Get the Thumbprint of your newest SSL Cert by doing the following:
- Start > Run mmc.exe or mmc.mcs.
- File > Add\Remove Snap-In
- Computer User
- Certificates > Add
- Certificates > Personal > Certificates > Double Click on the new Cert and scroll down to Thumbprint on the Details tab
- Remember this Thumbprint!
- Run this command on the Exchange Server using the Exchange Shell to view the Thumbprints: Get-ExchangeCertificate | fl subject,services,thumb*
- Copy that Thumbprint and paste it into the THUMBPRINT spot in this command: Enable-ExchangeCertificate -Thumbprint THUMBPRINT -Services IIS,SMTP,POP,IMAP
- Restart IIS by opening a command prompt and typing iisreset
Here’s a shot of the server error you’ll see on the website:
Here’s the location of that thumbprint:
Here’s a screenshot of the Certs location:
And here’s a screenshot of the Errors you’ll typically receive: Error 2001 will be the same for OWA and ECP.
Good Luck. Cheers!