Install an SSL Certificate on an Exchange 2010 server
In this guide we will show you how to create a Certificate Signing Request on Exchange 2010.
Follow these steps:
- Open the Exchange Management Shell. Run this command:
Import-ExchangeCertificate -FileData ([Byte[]]$(Get-Content -Path c:\certificates\SSL_CERTIFICATE.cer -Encoding byte -ReadCount 0))Important: If your SSL Certificate was sent as one or more .crt files instead of one .cer file, then the procedure might be different. Check that CERTIFICATE.cer is ORDER_NUMBER.crt or DOMAIN.crt. If this is the case, you might need to run the installation of your Root and Intermediate Certificates manually on the server where you want to house them.
- There should not be any spaces in the path that you select. The command should result in a thumbprint. Save it and continue.
- To start the service, use this command:
Enable-ExchangeCertificate -Thumbprint $thumbprint -Services "POP,SMTP,IMAP,IIS"(If the services that are listed above do not match the ones that you want to run, then you have to change them to fit your needs).
Congratulations, you're done. You have installed SSL for Exchange 2010.
If you would like to simultaneously import and enable your services, then you can use this command:
Import-ExchangeCertificate -FileData ([Byte[]]$(Get-Content -Path c:\certificates\CERTIFICATE.cer
-Encoding byte -ReadCount 0)) | Enable-ExchangeCertificate -Services "IIS,SMTP,POP,IMAP"