Tags for this FAQ item:
Exchange 2007 Microsoft

To what extent has this article answered your question?

Rated 2 stars, based on 2 votes

Microsoft Exchange 2007 - Install SSL Certificate

Last updated: 14/01/2016

This article shows you how to install an SSL certificate using the Exchange Management Shell (EMS). If you didn't generate a certificate request (CSR) yet, and didn't order a certificate, please see « Exchange 2007 SSL Certificate Request Instructions ».

The documentation for installing an SSL certificate on other versions of Microsoft Exchange can be found in the following articles:

You may have to install the Certificate Authority's root and intermediate SSL certificates if they haven't been installed on the server before. Please check out the « How to install root and intermediate SSL certificates on Microsoft IIS » for instructions.

  1. Save the SSL certificate file you received from the Certification Authority to your server's root directory.
  2. Go to Start, Programs, Administrative Tools, Microsoft Exchange 2007, Exchange Management Shell.
  3. At the Exchange Management Shell command line, type the following command to the Import-ExchangeCertificate and Enable-ExchangeCertificate cmdlets together:
    Import-ExchangeCertificate -Path C:\Desktop\mail_server_com.crt | Enable-ExchangeCertificate -Services "SMTP, IMAP, POP, IIS"
    The -Services parameter can be any of SMTP, IMAP, POP, IIS and UM. You can also disable a certificate by setting the -Services parameter to "None".
  4. Verify that your SSL certificate is enable in Exchange with the following command:
    Get-ExchangeCertificate -DomainName mail.server.com
    This should output a certificate thumbprint, a list of services for which it is enabled, and the Common Name of your certificate. If your certificate was not properly enabled, you can rerun the Enable-ExchangeCertificate cmdlet with the certificate's thumbprint:
    Enable-ExchangeCertificate -ThumbPrint [paste thumbprint here] -Services "SMTP, IMAP, POP, IIS"
  5. Your SSL certificate is now installed and enabled on Microsoft Exchange Server. Test your certificate by connecting with Outlook or going to the Outlook Web Access webmail client.
  6. If your certificate doesn't get sent correctly, a server reboot may be required, particularly if you had to install root and intermediate certificates first.
  7. Your certificate is now ready for use with Exchange 2007. Congratulations!