Toll Free: 800-892-7095

Install SSL Certificate: Exchange Server 2010

In Exchange 2010 there are two ways to install your SSL certificate. Option 1 is to use the Exchange Management Console GUI (recommended) and options 2 is by using the Exchange Management Shell. We will discuss both.

Download and copy your certificate files to your server

Download your SSL certificate and support files by clicking on the download link in your fulfillment email or from your GeoCerts SSL Manager account. Download the PKCS#7 formatted version of your certificate.

Copy the PKCS#7 file to your Exchange server (Saving to the desktop is fine, you can delete this file after it's installed). Rename the file your_domain_com.p7b to your_domain_com.cer

Option 1: Install using Exchange Management Console GUI (recommended)

Start the Exchange Management Shell. Click Start > Programs > Microsoft Exchange Server 2010, and then click Exchange Management Console.
Click the link to "Manage Databases", and then go to "Server configuration".
Select your certificate from the menu in the center of the screen (The certificate will be listed by the Friendly Name you chose when creating the CSR), and then click the link in the Actions menu to "Complete Pending Request".
Browse to the certificate file you just copied to your server, then click Open > Complete.
URGENT!! You may receive the following error: "The source data is corrupted or not properly Base64 encoded." You can ignore this error.
Press F5 to refresh the certificate list. Verify that it says "False" under "Self Signed".
To enable your certificate, return to the Exchange Management Console and click the link to "Assign Services to Certificate."
Select your certificate from the list provided, then click Next.
Select the services for which you would like to enable your new certificate, click Next > Assign > Finish. Your certificate should now be Installed and Enabled for use with Exchange.

If you are running an ISA server you will need to export the certificate keys from your Exchange Server to your ISA server. See our tutorial on Windows SSL export/import for more info. You should also reboot your ISA server after the import.

Verify Installation

New To verify if your certificate is installed correctly, use our Certificate Installation Checker.

Test your SSL certificate by using a browser to connect to your server. Use the https protocol directive. For example, if your SSL was issued to secure.mysite.com, enter https://secure.mysite.com into your browser.

Your browser's padlock icon Browser padlock will be displayed in the locked position if your certificate is installed correctly and the server is properly configured for SSL.

Option 2: Install using Exchange Management Shell

Start the Microsoft Exchange Management Shell by clicking Start > Programs > Microsoft Exchange 2010 > Exchange Management Shell.
From the command line, type the following:
Import-ExchangeCertificate -FileData ([Byte[]]$(Get-Content -Path c:\your_domain_name.cer -Encoding byte -ReadCount 0)) | Enable-ExchangeCertificate -Services "IIS,POP,IMAP,SMTP"
NOTE: only the desired services should be specified by the Enable-ExchangeCertificate portion of the command.

To learn more about Exchange Management Shell see Security Cmdlets

Verify Installation

New To verify if your certificate is installed correctly, use our Certificate Installation Checker.

Your browser's padlock icon Browser padlock will be displayed in the locked position if your certificate is installed correctly and the server is properly configured for SSL.

For IIS SSL troubleshooting, Microsoft has designed a tool - SSL Diagnostics - to aid in quickly identifying configuration problems in the IIS metabase, certificates, or certificate stores.

Disclaimer: GeoCerts has made efforts to ensure the accuracy and completeness of the information in this document. However, GeoCerts makes no warranties of any kind (whether express, implied or statutory) with respect to the information contained herein. GeoCerts assumes no liability to any party for any loss or damage (whether direct or indirect) caused by any errors, omissions, or statements of any kind contained in this document. Further, GeoCerts assumes no liability arising from the application or use of the product or service described herein and specifically disclaims any representation that the products or services described herein do not infringe upon any existing or future intellectual property rights. Nothing herein grants the reader any license to make, use, or sell equipment or products constructed in accordance with this document. Finally, all rights and privileges related to any intellectual property right described herein are vested in the patent, trademark, or service mark owner, and no other person may exercise such rights without express permission, authority, or license secured from the patent, trademark, or service mark owner. GeoCerts reserves the right to make changes to any information herein without further notice.

Our Customers

(see more)