Installation of TLS certificate in Microsoft Exchange 2010 and 2007

Installing the certificate in Microsoft Exchange 2010

The issued SSL certificate is delivered by email. The certificate arrives in text form encoded in Base64 format. Create a .cer file and copy it to your server.

Launch Exchange Management Console from Start > Programs > Microsoft Exchange 2010 > Exchange Management Console. In the middle window select Manage Databases and then in the drop-down menu on Server configuration.

In the middle of the screen you will see a list of certificates on the server. Click Complete Pending Request on the right and select a certificate file in the dialog. Click Complete to upload the certificate to the server.

Press F5 to update the certificate list. In the server certificate list, False must be entered in the Self Signed field. If True, you have selected the wrong certificate, or the certificate is actually self-signed (not trusted).

Now you need to set up certificate-related services. In the right menu, click Assign Services to Certificate. A list of servers appears; go to the next step to select server services. Confirm your selection in the next two steps and click Finish to close the dialog.

The certificate is now installed and ready for use on the Exchange server.

Installation via PowerShell

If you prefer to install via the PowerShell command line, type the following command:

Import-ExchangeCertificate -FileData ([Byte[]]$(Get-Content -Path c:\your_domain_name.p7b -Encoding byte -ReadCount 0)) | Enable-ExchangeCertificate -Services "IIS,POP,IMAP,SMTP"

Installing the certificate in Microsoft Exchange 2007

The issued SSL certificate is delivered by email. The certificate arrives in text form encoded in Base64 format. Create a .cer file and copy it to your server.

Via Start > Programs > Microsoft Exchange Server 2007 run Exchange Management Shell.

Then run these commands:

Import-ExchangeCertificate -Path C:\certificate_name.crt
Enable-ExchangeCertificate -Services "SMTP, IMAP, POP, IIS"

Parameter description

• Import-ExchangeCertificate — Imports a certificate or certificate chain from a CA
• -Path — Specifies the path where the certificate should be installed
• Enable-ExchangeCertificate — Enables or disables the certificate for specific services
• -Services — This parameter specifies for which services the certificate should be used. You can use these values: IMAP, POP, UM, IIS, SMTP, None

Verifying the installation

To verify the installation for the correct service, use the command:

Get-ExchangeCertificate

You will see a list of certificates, including their thumbprint (hash), the services they use and the Subject name.

To check a specific domain, use the parameter:

Get-ExchangeCertificate -DomainName yourdomainname

If a particular certificate is not properly enabled, you can enable it with the command:

Enable-ExchangeCertificate -Thumbprint [include thumbprint here] -Services "SMTP, IMAP, POP, IIS"

At the end of the installation, restart the server.

Installation check

You can verify that the SSL certificate is installed by using the CA tool. For more information, see Checking SSL Certificate Installation in the Help article on installing certificates.

Need help?

In case you need anything, please contact our customer support, who will help you with any problem.