How to remove an an expired certificate from Messaging Gateway

Products

• Messaging Gateway

Issue/Introduction

How to remove an expired certificate from Symantec Messaging Gateway

The certificate <example certificate name> is currently in use by the (inbound | outbound | delivery) MTA on host <example host>

Cause

You can delete certificates in the Control Center

(Administration -> Certificates)

Resolution

Make sure all the places where a TLS certificate can be selected have been disabled.

1. (Administration -> Configuration -> Select a Scanner -> SMTP)
   1. On each of the Inbound, Outbound, and Authentication tabs check that next to "Accept TLS encryption" the certificate is not selected and click "Save".
2. (Administration -> Configuration -> Select a Scanner -> SMTP -> Advanced Settings -> Delivery)
   1. Change "Offer TLS client certificate" to a different certificate or uncheck the box and click "Save".

(NOTE: Old certificates can be selected on tabs that are not currently visible in the Control Center. Enabling "Inbound and outbound mail filtering" temporarily will allow you to see all tabs and select a different cert. After saving the settings, you can return the setting to your preferred configuration and save the settings again.)

Additionally, if you are trying to remove an HTTPS cert verify that the certificate is not selected in (Administration > Control Center > Certificates).