In this article, I will teach. How to Install and Configure SSL Certificate on Exchange Server, and how to provide it with various services.
There are two ways to do this:
- Through ECP Web Interface
- In PowerShell
In this tutorial, we will consider two ways in which we can do so.
Prerequisite
You must have a certificate in PFX format and its password and place it on the network share accessible by the Exchange servers.
Install and Configure SSL Certificate on Exchange
You have placed a certificate on the network share, now it will continue with the installation.
Read Also: How to Configure HPE MSA 2050 Step by Step
Via ECP Web Interface
Go to server management rather than in the certificate section.
Instantly click on Import Exchange Certificate.
In the new window, show the location of the certificate and password and click on Next.
Now you have to indicate that the server will be imported into the servers (you may have selected several), click on the icon.
Select the servers from the list and click the add button.
For selected servers, click OK.
Server (s) added to install the certificate, click Finish.
The certificate is installed and is usually displayed in a list.
Now, you have to assign it to the services, select a certificate, and click on the modification icon.
Click on Services.
View the services for which the certificate has been specified and click Save.
Confirm the warning message if you have selected an SMTP service.
Close the window, the certificate is assigned to the services.
If you have multiple servers, start one by one.
With PowerShell
From the instant launch of PowerShell from the Exchange server, enter the following command used for your environment to import the certificate:
Import-ExchangeCertificate -Server SRV-EXCHANGE -FileName “\SRV\certs\ExchangeCertificat.pfx” -PrivateKeyExportable:$true -Password (ConvertTo-SecureString -String “CertPassword” -AsPlainText -Force)
Now you have to rewrite the certificate fingerprint, enter the command below:
Get-ExchangeCertificate | select Thumbprint, Services, NotAfter, Subject, CertificateDomains
Select the fingerprint of the certificate to copy, for which you want to assign to services.
Then enter the command below to assign the certificate to the services:
Enable-ExchangeCertificate -Thumbprint 870cc1072e80500acdb187ec0b2cdc6221eb -Services SMTP,IMAP,IIS
Make sure to replace the PowerShell window.
Conclusion:
The two solutions are the same, in an area with multiple Exchange servers, the use of PowerShell allows to automate the change of the certificate and the assignment to the services.
If you have any questions or queries about this article, please comment below, and we’ll get back to you. Check more daily updates to get subscribe to our website and also you can get informational articles and much more etc.
