Feb 15, 2024

Install Certificate - Microsoft Exchange 2010

Article Purpose: This article provides step-by-step instructions for installing your certificate in Microsoft Exchange 2010. If this is not the solution you are looking for, please search for your solution in the search bar above.

Please follow the steps below to import the Intermediate certificate and the SSL certificate.

Please additionally make sure you have completed the following before attempting to install your certificate:
 

• Generated a CSR
• Install the Intermediate Certificate (Download the Intermediate Certificate here)
• Download the Root Certificate

Import the Intermediate certificate

1. Use the correct Intermediate certificate from the link above and follow the instructions below:
   1. Copy the intermediate certificate from the webpage and paste it into a simple text editor, such as Notepad.
   2. Save it as intermediate.cer on your desktop.
   3. Open MMC.
   4. Select File. Click Add/Remove Snap In.
   5. Click Add.
   6. Select Certificates. Click Add.
   7. Select Computer Account. Click Next.
   8. Select Local Computer. Click Finish. Click Close then OK​.
   9. Select Certificates. Select Intermediate Certification Authorities and then Certificates.
   10. Right-Click Certificates. Select All-Tasks. Click Import.
        
2. The Import Wizard will start. Follow the instructions to import the intermediate certificate and close MMC.

Import the SSL certificate

1. Copy the SSL certificate from the email and save this as mydomain.cer. It is advised that you place this on your desktop.
   
   Installing the certificate with the Exchange Management Console:
   1. Start the Exchange Management Console by selecting Start, Programs, Microsoft Exchange 2010, and Exchange Management Console.
   2. Select Manage Databases, and then Server configuration.
   3. Select the certificate from the center menu (listed by its Friendly Name), and select Complete Pending Request from the Actions menu.
   4. Browse to the certificate file, then select Open and click Complete.
       
2. Press F5 to refresh the page and verify that the certificate now says False under Self Signed. If True is still shown, the wrong certificate has been selected, or installed on the wrong server. To resolve this issue, create a new CSR on this Exchange server and reissue the certificate.
3. If installed correctly you now need to enable the certificate. Go back to the Exchange Management Console and click the link to Assign Services to Certificate.
4. Select the server from the list provided. Click Next.
5. Select the services for which the certificate must be enabled then click Next. Click Assign. Click Finish.
6. The certificate is now Installed and enabled for use with Exchange 2010.

Note: Do not use the Certificate snap-in to import the certificates for any service on an Exchange server. Using the Certificate snap-in to import certificates on Exchange servers will fail. Therefore, TLS or other Exchange certificate services will not work.

For more info please visit http://technet.microsoft.com/en-us/library/bb125165.aspx