Installing your SSL: Microsoft Exchange 2007

You will receive an email with your SSL certificate and Intermediate certificate. Please follow the steps shown below to install your SSL certificate.

Import the Intermediate certificate

1

First, copy the Intermediate certificate from the email you received and then follow these simple instructions:

  • Copy the intermediate certificate from the body of the email and paste it into a simple text editor of your choice, such as Notepad.
  • Save it as intermediate.cer on your desktop.
  • Open MMC.
  • Select File, Add/Remove Snap In.
  • Select Add.
  • Select Certificates, Add.
  • Select Computer Account, Next.
  • Local Computer, Finish, Close, OK.
  • Select Certificates, Intermediate Certification Authorities, Certificates.
  • Right-Click Certificates, All-Tasks, Import.
2

The Import Wizard should now start. Next, just follow the instructions to import the intermediate certificate and close MMC.

Import the SSL certificate

3

Copy the SSL certificate from the email and then save this as mydomain.cer to whichever location you want.

4

Next, open the Exchange Management Shell and run the import and enable commands together separated by a pipe character:

Import-ExchangeCertificate -Path C:\mydomain.cer | Enable-ExchangeCertificate -Services "SMTP, IMAP, POP, IIS"

5

The services can be any combination of these values: IMAP, POP, UM, IIS, SMTP.

6

You can verify that your certificate is enabled and running by using the following command:

Get-ExchangeCertificate -DomainName mydomain.cer

7

In response to the above command you should see the certificates thumbprint, an abbreviated list of the services and mydomain.cer. You can re-run the modified Enable command with the certificate thumbprint if your certificate isn’t enabled correctly.

Enable-ExchangeCertificate -Thumbprint [paste thumbprint here] -Services "SMTP,IMAP, POP, IIS"

8

Finally, reboot your server and then test your certificate is working properly by connecting with IE, ActiveSync or Outlook.

Important: Do not use the Certificate snap-in to import the certificates for any service on an Exchange server. Using the Certificate snap-in to import certificates on Exchange servers will fail. Therefore, TLS or other Exchange certificate services will not work. Learn more about this by visiting the following page: http://technet.microsoft.com/en-us/library/bb125165.aspx.

Answer options

Your feedback was successfully added.

Answer tracking

Track

Watch the content of this article for changes.