Installing your SSL: Microsoft Exchange 2007

Installing your SSL: Microsoft Exchange 2007

You will receive an email with your SSL certificate and Intermediate certificate. Next, you will need to install your SSL certificate following the below steps:

Import the Intermediate certificate

1

Start by copying the Intermediate certificate from the email and then follow these steps:

  • Copy the intermediate certificate from the body of the email and paste it into a simple text editor, such as Notepad.
  • Save it as intermediate.cer on your desktop.
  • Open MMC.
  • Select File, Add/Remove Snap In.
  • Select Add.
  • Select Certificates, Add.
  • Select Computer Account, Next.
  • Local Computer, Finish, Close, OK.
  • Select Certificates, Intermediate Certification Authorities, Certificates.
  • Right-Click Certificates, All-Tasks, Import.
2

The Import Wizard will now start. Proceed by following the below instructions to import the intermediate certificate and close MMC.



Import the SSL certificate

3

First, copy the SSL certificate from the email and save this as mydomain.cer to any location of your choice.

4

Then, open the Exchange Management Shell and run the import and enable commands together separated by a pipe character:

Import-ExchangeCertificate -Path C:\mydomain.cer | Enable-ExchangeCertificate -Services "SMTP, IMAP, POP, IIS"

5

The services can be any combination of these values: IMAP, POP, UM, IIS, SMTP.

6

Run the below command to check that your certificate is enabled and running properly:

Get-ExchangeCertificate -DomainName mydomain.cer

7

In response to the above command you should now see the certificates thumbprint, an abbreviated list of the services and mydomain.cer. In case that your certificate isn't properly enabled, you can re-run the modified Enable command with the certificate thumbprint:

Enable-ExchangeCertificate -Thumbprint [paste thumbprint here] -Services "SMTP,IMAP, POP, IIS"

8

Now reboot your server and test your certificate is working by connecting with IE, ActiveSync or Outlook.

Important: Do not use the Certificate snap-in import the certificates for any service on an Exchange server. Using the Certificate snap-in to import certificates on Exchange servers will fail. Therefore, TLS or other Exchange certificate services will not work. Learn more by visiting this page: http://technet.microsoft.com/en-us/library/bb125165.aspx.