MS Exchange 2007 Install Certificates

13 Jul

SSL Certificates > MS Exchange 2007 > Install Certificates

Import the Intermediate certificate

  1. Copy the Intermediate certificate from the email and use the follwoing instructions
    1. Copy the intermediate certificate from the body of the email and paste it into a simple text editor, such as Notepad
    2. Save it as intermediate.cer on your desktop
    3. Open MMC
    4. Select File > Add/Remove Snap In
    5. Select Add
    6. Select Certificates > Add
    7. Select Computer Account > Next
    8. Local Computer > Finish > Close > OK
    9. Select Certificates > Intermediate Certification Authorities > Certificates
    10. Right-Click Certificates > All-Tasks > Import
  2. The Import Wizard will start, follow the instructions to import the intermediate certificate and close MMC.

    Import the SSL certificate

  3. Copy the SSL certificate from the email and save this as mydomain.cer. The name and location of the file are not important.
  4. Open the Exchange Management Shell and run the import and enable commands together separated by a pipe character:
    • Import-ExchangeCertificate -Path C:\mydomain.cer | Enable-ExchangeCertificate -Services "SMTP, IMAP, POP, IIS"
  5. The services can be any combination of these values: IMAP, POP, UM, IIS, SMTP
  6. To verify that your certificate is running and enabled run the following command:
    • Get-ExchangeCertificate -DomainName mydomain.cer
  7. In response to the above command you you should see the certificates thumbprint, an abbreviated list of the services and mydomain.cer. If your certificate isn’t properly enabled, you can re-run the modified Enable command with the certificate thumbprint
    • Enable-ExchangeCertificate -Thumbprint [paste thumbprint here] -Services "SMTP,IMAP, POP, IIS"
  8. Reboot your server and test your certificate is working by connecting with IE, ActiveSync or Outlook.

Important: Do not use the Certificate snap-in to import the certificates for any service on an Exchange server. Using the Certificate snap-in to import certificates on Exchange servers will fail. Therefore, TLS or other Exchange certificate services will not work.

For more info please visit

Leave a comment

Posted by on July 13, 2010 in Exchange


Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

%d bloggers like this: