We run a 4 server DAG environment for exchange 2010. Each server has HUB, CAS and Mailbox roles. When originally setting up the servers, I was playing with the certificates (using our internal certificate authority). Everything was working fine for about a year, until I recently upgraded from SP1 ru7 to SP2 ru4v2. Now when I go to Organization Configuration / Server Configuration and look at the certificates, I notice each server has the main cert we purchased from a third party, and two additional certs that originally created. I can remove these certs without a problem (since they are not assigned to anything), but they just simply come back shortly afterwards. I found that they are located in the Certificates snap-in in mmc, under serverName\Personal\certificates. I removed the unneeded certs from there (which removes them from EMC, but they just simply reappear after a while. I did find an event viewer error which I think may be related:
The description for Event ID (66) in Source (CertSvc) can't be found. The computer may not have the necessary registry information or message DLL files to display messages
The following information is part of the event:
0; ldap:///CN=COMPANY-SERVER1-CA,CN=COMPANY,CN=CDP,CN=Public Key Services,CN=Services,CN=Configuration,DC=COMPANY,DC=com; Operation aborted 0x80004004 (-2147467260); ; ;
Any help or guidance would be greatly appreciated.
Thanks…Andy