I have three Exchange 2013 servers in two different AD Sites, each having all roles. All are working well for last 9 months and I'm wondering if I can delete the three default self-signed certificates on each server. We use a public cert (VeriSign) which covers POP, IIS, and SMTP, so my thought is I should be able to. Every time I Google this I find MS clearly saying:
"By default, the Client Access server is configured with a self-signed certificate that is not trusted byclients. You should remove this certificate and install a certificate from a trusted Certificate Authority (CA)."
The problem is that it does not use the plural context in the above statement...only singular. So, can I delete all three safely?
~Rick