Install an SSL Certificate on Microsoft Exchange 2007

This article shows you how to install an SSL certificate using the Exchange Management Shell (EMS). If you didn't generate a certificate request (CSR) yet, and didn't order a certificate, please see « Exchange 2007 SSL Certificate Request Instructions ».

Other versions of Microsoft Exchange

The documentation for installing an SSL certificate on other versions of Microsoft Exchange can be found in the following articles:

• « How to install an SSL certificate on Microsoft Exchange 2003 »
• « How to install an SSL certificate on Microsoft Exchange 2010 »
• « How to install an SSL certificate on Microsoft Exchange 2013 »

Installing root and intermediate certificates

You may have to install the Certificate Authority's root and intermediate SSL certificates if they haven't been installed on the server before. Please check out the « How to install root and intermediate SSL certificates on Microsoft IIS » for instructions.

How do I install an SSL certificate on Microsoft Exchange 2007?

1. Save the SSL certificate file you received from the Certification Authority to your server's root directory.
   
2. Go to Start, Programs, Administrative Tools, Microsoft Exchange 2007, Exchange Management Shell.
   
3. At the Exchange Management Shell command line, type the following command to the Import-ExchangeCertificate and Enable-ExchangeCertificate cmdlets together:
   

   Import-ExchangeCertificate -Path <strong>C:\Desktop\mail_server_com.crt</strong> | Enable-ExchangeCertificate -Services "SMTP, IMAP, POP, IIS"
   

   The -Services parameter can be any of SMTP, IMAP, POP, IIS and UM. You can also disable a certificate by setting the -Services parameter to "None".
   
4. Verify that your SSL certificate is enable in Exchange with the following command:
   

   Get-ExchangeCertificate -DomainName <strong>mail.server.com</strong>
   

   This should output a certificate thumbprint, a list of services for which it is enabled, and the Common Name of your certificate. If your certificate was not properly enabled, you can rerun the Enable-ExchangeCertificate cmdlet with the certificate's thumbprint:
   

   Enable-ExchangeCertificate -ThumbPrint <strong>[paste thumbprint here]</strong> -Services "SMTP, IMAP, POP, IIS"
   

5. Your SSL certificate is now installed and enabled on Microsoft Exchange Server. Test your certificate by connecting with Outlook or going to the Outlook Web Access webmail client.
   
6. If your certificate doesn't get sent correctly, a server reboot may be required, particularly if you had to install root and intermediate certificates first.
   
7. Your certificate is now ready for use with Exchange 2007. Congratulations!