Installing an SSL Certificate in Exchange Server 2007

After your SSL request is vetted and your certificate is issued, download and install all the provided files. You must install all of the files on your Microsoft® Exchange Server 2007 to complete installation. For more information see Downloading an SSL Certificate.

Before you begin, make sure you are logged in to your server as Administrator.

To run multiple services securely, such as SMTP, POP, IMAP, UM, and IIS, you must use a Multiple Domain (UCC) Certificate.

To Install Your SSL Certificate in Microsoft Exchange Server 2007

  1. From the Start menu, click Run...
  2. Type mmc and click OK. The Microsoft Management Console (Console) window opens.
  3. From the File menu, click Add/Remove Snap In.
  4. Select Certificates, and then click Add.
  5. Select Computer Account, and then click Next.
  6. Select Local Computer, and then click Finish.
  7. Click OK to close Add or Remove Snap-ins.
  8. In the Console window, expand the Certificates folder.
  9. Right-click Intermediate Certification Authorities, mouse-over All Tasks, and then click Import.
  10. In the Certificate Import Wizard, click Next.
  11. Click Browse to find the certificate file.
  12. In the bottom right corner, change the file extension filter to PKCS #7 Certificates (*.spc;*.p7b).
  13. Select your certificate file, and then click Open.
  14. Click Next.
  15. Select Place all certificates in the following store.
  16. Click Browse, select Intermediate Certification Authorities, and then click Next.
  17. Click Finish.
  18. From the Start menu, select Microsoft Exchange Server 2007, and then click Exchange Management Shell.
  19. At the prompt, type the following to import the certificate:
                             Import-ExchangeCertificate -Path C:\CertificateFile.crt

    NOTE: Replace CertificateFile.crt with the complete path and file name of your certificate.

    If the output of this command doesn’t copy the thumbprint of the certificate, then you must copy it manually for use in the next step.

  20. Type the following to enable the certificate:
                              Enable-ExchangeCertificate -Thumbprint paste_thumbprint_here -Services “SMTP, IMAP, IIS“

    NOTE: Paste the thumbprint in place of paste_thumbprint_here. Specify the services this certificate covers, using quotes. Valid service identifiers are SMTP, POP, IMAP, UM, and IIS. Do not enable services that are not in use.

  21. Close the Exchange Management Shell window.

Your SSL Certificate is installed. If you have problems, please see Where can I get information about my SSL’s configuration? to help diagnose issues.

Done Button