I installed Exchange 2013. I ran ECP to create new rules, etc., and all worked fine. I then created a new certificate using ECP, submitted it to my Server 2012 CA, and installed it in ECP (completed the pending process and it showed valid). I stayed in ECP for a few more tasks, then exited.
I can still get into OWA and access the Exchange Server from intra- and internet Outlook clients but when I try to get into ECP (the ECP webpage does load) it rejects the login: I enter the name and password and ECP responds with a refresh of the webpage, keeping the name and blanking out the password. I would think this a certificate problem but, as noted, I can access OWA from the same machine on which I am trying to access ECP.