How to install a SSL Certificate for Microsoft Exchange 2007


Step 1: Obtain Intermediate CA Certificate

  • Copy the Intermediate CA certificate from your Secure128 portal under “Order Details”.
  • Be sure there are 5 dashes to either side of the BEGIN CERTIFICATE and END CERTIFICATE and that no white spaces, extra line breaks or additional characters have been inadvertently added.

Step 2: Obtain and Install your SSL Certificate

  • The SSL certificate will be sent by email. The certificate is included as an attachment (Cert.cer) and it is also imbedded in the body of the email. Copy the certificate.
  • The text file should look like this:

-----BEGIN CERTIFICATE----- [encoded data] -----END CERTIFICATE-----

To install a SSL certificate onto Microsoft Exchange 2007, you will need to use the Exchange Management Shell.

  • Copy the SSL certificate file, for example newcert.p7b and save it to C:\ on your Exchange server
  • Open the Exchange Management Shell. Click Start > Programs > Microsoft Exchange Server 2007 > Exchange Management Shell.
  • Run the Import-ExchangeCertificate and Enable-ExchangeCertificate commands together (both commands are run on the same line, separated by a pipe character)

Import-ExchangeCertificate -Path C:\newcert.p7b | Enable-ExchangeCertificate -Services "SMTP, IMAP, POP, IIS"

  • Verify that your certificate is enabled by running the Get-ExchangeCertificate command

    • C:\> Get-ExchangeCertificate -DomainName your.domain.name

  • In the Services column, letters SIP and W stand for SMTP, IMAP, POP3 and Web (IIS).

    • NOTE: If your certificate isn't properly enabled, you can re-run the Enable-ExchangeCertificate command by pasting the thumbprint of your certificate as the -ThumbPrint argument such as:

    Enable-ExchangeCertificate -ThumbPrint [paste] -Services "SMTP, IMAP, POP, IIS"

    NOTE: If using ISA 2004 or ISA 2006, you need to reboot your servers. It has been reported that ISA services won't send the intermediate certificate until after a reboot.

Verify your Certificate is installed correctly

BACK