Knowledge Base

Install an SSL Certificate on an Exchange 2007 Server

You can install SSL for Exchange 2007 by doing the following:

  1. Open the Exchange Management Shell (Click Start > Programs > Microsoft Exchange Server 2007 > Exchange Management Shell).
  2. From the Exchange Management Shell, run the following command to install the server, root, and intermediate certificates to their respective certificate stores:
    Import-ExchangeCertificate -Path c:\exchange_example_net.crt | Enable-ExchangeCertificate -Services SMTP

    Where c:\exchange_example_net.crt is your certificate that you got.

  3. The Services flag sets which services the certificate is enabled for. Valid options include: SMTP, IMAP, POP, IIS, UM.
  4. To enable multiple services, run the following:
    Import-ExchangeCertificate -Path c:\exchange_example_net.crt | Enable-ExchangeCertificate -Services "SMTP, POP, IMAP, IIS"

    Where c:\exchange_example_net.crt is your certificate that you got.

Congratulations, you have installed SSL for Exchange 2007.

Before users' browsers will automatically trust your certificate, you must also install the Intermediate Certificates on your Server.


Installing the Intermediate Certificate Files

Once you have installed the site certificate, you may need to follow the below procedure with the other files that you have been sent in order to complete the installation.

  1. Double-click the root certificate (TrustedRoot.crt) to open the installation wizard.
  2. Choose Place all certificates in the following store, then click on Browse.
  3. Choose Show physical stores, then Trusted Root Certification Authorities and finally Local Computer.
  4. Click Ok and hit Next in the wizard, then Finish.
  5. Then follow the same steps for the intermediate certificate (DigiCertCA.crt), but place it in the store for Intermediate Certification Authorities instead.
  6. Restart your Server.

Congratulations, you have installed the Intermediate Certificate Files.

Did you find this article helpful?

* Your feedback is too short