Exchange 2010 SSL Installation Guide

SSL Certificate Installation for Exchange 2010

If you have not yet created a Certificate Signing Request (CSR) and ordered your certificate, see Exchange 2010 CSR Creation.

How to install your SSL certificate in Exchange 2010

Exchange 2010 Installation Tutorial Video

Installing with the Exchange Management Console

1. Download and open the ZIP file containing your certificate. Your certificate file will be named your_domain_name.cer.

2. Copy the your_domain_name.cer file to your Exchange server.

3. Start the Exchange Management Console by going to Start > Programs > Microsoft Exchange 2010 > Exchange Management Console.

4. Click the link to "Manage Databases", and then go to "Server configuration".

5. Select your certificate from the menu in the center of the screen (listed by its Friendly Name), and then click the link in the Actions menu to "Complete Pending Request".

   

6. Browse to your certificate file, then click Open > Complete.

   Frequently Exchange 2010 will show an error message stating that "The source data is corrupted or not properly Base64 encoded." Ignore that error.

   Hit F5 to refresh the certificate and verify that it now says "False" under "Self Signed". If it still shows "True", you may have selected the wrong certificate or you may have generated the request on a different server. To fix this, you can create a new CSR on this Exchange server and reissue the certificate.

7. Now, to enable your certificate for use, go back to the Exchange Management Console and click the link to "Assign Services to Certificate."

   

8. Select your server from the list provided, then click Next.

9. Select the services for which you would like to enable your new certificate, click Next > Assign > Finish.

   Your certificate should now be Installed and Enabled for use with Exchange.

Exporting to your ISA Server (VERY IMPORTANT)

When exporting your certificate, make sure to include all certificates in the certification chain, when prompted. Otherwise, your certificate will not work properly.

If you are currently using an ISA (Internet Security and Acceleration) server in front of your Exchange 2010 server, or need to export your SSL certificate to any other Microsoft server type, see our Exchange export instructions for a step-by-step walkthrough.

For assistance getting your certificate installed or fixing an SSL installation issue, check out our new Windows SSL manager.

Installing with the Command Line Interface

If you prefer to install your certificate using the Exchange Powershell, you can run the following command:

Import-ExchangeCertificate -FileData ([Byte[]]$(Get-Content -Path c:\your_domain_name.p7b -Encoding byte -ReadCount 0)) | Enable-ExchangeCertificate -Services "IIS,POP,IMAP,SMTP"

Where only the desired services are specified by the Enable-ExchangeCertificate portion of the command.

SSL Certificates for Microsoft Exchange 2010

How to install your SSL Certificate to Exchange 2010.
Guía en español para Instalar Exchange 2010 Certificado SSL en sus servidores de correo.