If a mailbox has an x.509 certificate, will that certificate be migrated along with the mailbox when (NETIQKB27902)

  • 7727902
  • 02-Feb-2007
  • 09-Jul-2008

Resolution

goal
If a mailbox has an x.509 certificate, will that certificate be migrated along with the mailbox when migrating?

fact
Exchange Migrator 1.x

fact
Exchange Migrator 2.x

fix

Exchange Migrator does not include any functionality to translate X.509 certificates. Although this has not been tested, based on standard encryption functionality, the new account should not be able to decrypt the messages. Besides the user who encrypted the data, the Recovery Agent (usually Local Administrator on the box that created the certificate) is the only other user that will be able to decrypt it.



note

For more information regarding encryption, please refer to the following Microsoft Article:

Using a Certificate Authority for the Encrypting File Service
http://support.microsoft.com/default.aspx?scid=kb;en-us;223338



Additional Information

Formerly known as NETIQKB27902