Install an SSL Certificate on Microsoft Exchange Server 2010

After you enter the CSR in our online application, and once your certificate is ready for installation, you need to download all of the files we provide. You must install the intermediate and primary certificate to your Microsoft® Exchange server 2010 to complete installation. You can download your certificate from your ssl.com account.

Exchange server 2010 requires a Multiple Domain (UCC) Certificate to run all services securely.

To Install an SSL Certificate in Microsoft Exchange 2010

1. To install the intermediate certificate, click Start, and then click Run..
2. Type mmc, and then click OK. The Microsoft Management Console (Console1) window opens.
3. In the Console1 window, click File, and then select Add/Remove Snap-in. The Add or Remove Snap-ins window displays.
4. In the Add or Remove Snap-ins window, select Certificates, and then click Add.
5. In the Computer Account window, select Computer Account, and then click Next.
6. In the Select Computer window, select Local Computer, and then click Finish.
7. In the Add or Remove Snap-ins window, click OK.
8. In the Console1 window, click + to expand the Certificates (Local Computer) folder on the left.
9. Right-click Intermediate Certification Authorities, mouse over All Tasks, and then click Import.
10. In the Certificate Import Wizard window, click Next.
11. Click Browse to find the intermediate certificate file.
12. In the Open window, change the file extension filter to PKCS #7 Certificates (*.spc;*.p7b), select the *_iis_intermediates.p7b file, and then click Open.
13. In the Certificate Import Wizard window, click Next.
14. Select Place all certificates in the following store, and then click Browse.
15. In the Select Certificate Store window, select Intermediate Certification Authorities, and then click OK.
16. In the Certificate Import Wizard window, click Next.
17. Click Finish.
18. Click OK.
19. Close the Console1 window, and then click No to remove the console settings.
20. To install the primary certificate, click Start, click All Programs, Microsoft Exchange Server 2010, and then click Exchange Management Console.
21. In the Exchange Management Console, click Microsoft Exchange On-Premises, and then click Manage Databases.
22. Click Server Configuration.
23. In Exchange Certificates, select your certificate, and then, from the Actions panel on the right, click Complete Pending Request.
24. In the Complete Pending Request window, click Browse to locate the certificate file.
25. In the Open window, select All Files(*.*) as your file name extension, select your certificate (it might be saved as a .txt, .cer, or .crt), and then click Open.
26. In the Complete Pending Request window, click Complete.

NOTE: If you receive the error, “The source data is corrupted or not properly Base64 encoded,” check the Self Signed field. If it is True, refresh console by pressing F5 on your keyboard. If it still displays True, create a new CSR and then resubmit the CSR to ssl.com for reprocessing.

27. Click Finish.
28. In the Exchange Management Console, select your certificate in Exchange Certificates.
29. From the Actions menu, click Assign Services to Certificate.
30. In the Assign Services to Certificate window, select the server(s) you want to assign services to, and then click Next.
31. Select services you want to assign to the certificate, and then click Next.
32. Click Assign.
33. Click Finish.