You will receive an email with your SSL certificate and Intermediate certificate. Please follow the steps shown below to install your SSL certificate.
Import the Intermediate certificate
1
First, copy the Intermediate certificate from the email you received and then follow these simple instructions:
- Copy the intermediate certificate from the body of the email and paste it into a simple text editor of your choice, such as Notepad.
- Save it as intermediate.cer on your desktop.
- Open MMC.
- Select File, Add/Remove Snap In.
- Select Add.
- Select Certificates, Add.
- Select Computer Account, Next.
- Local Computer, Finish, Close, OK.
- Select Certificates, Intermediate Certification Authorities, Certificates.
- Right-Click Certificates, All-Tasks, Import.
2
The Import Wizard should now start. Next, just follow the instructions to import the intermediate certificate and close MMC.
Import the SSL certificate
3
Copy the SSL certificate from the email and then save this as mydomain.cer to whichever location you want.
4
Next, open the Exchange Management Shell and run the import and enable commands together separated by a pipe character:
Import-ExchangeCertificate -Path C:\mydomain.cer | Enable-ExchangeCertificate -Services "SMTP, IMAP, POP, IIS"
5
The services can be any combination of these values: IMAP, POP, UM, IIS, SMTP.
6
You can verify that your certificate is enabled and running by using the following command:
Get-ExchangeCertificate -DomainName mydomain.cer
7
In response to the above command you should see the certificates thumbprint, an abbreviated list of the services and mydomain.cer. You can re-run the modified Enable command with the certificate thumbprint if your certificate isn’t enabled correctly.
Enable-ExchangeCertificate -Thumbprint [paste thumbprint here] -Services "SMTP,IMAP, POP, IIS"
8
Finally, reboot your server and then test your certificate is working properly by connecting with IE, ActiveSync or Outlook.
Important: Do not use the Certificate snap-in to import the certificates for any service on an Exchange server. Using the Certificate snap-in to import certificates on Exchange servers will fail. Therefore, TLS or other Exchange certificate services will not work. Learn more about this by visiting the following page: http://technet.microsoft.com/en-us/library/bb125165.aspx.