Manually install an SSL certificate on my Exchange Server 2013
Copy your certificate files onto the server
- Open the Exchange server's network share folder where your certificate and key files are stored, then upload your intermediate certificate (
gd_iis_intermediates.p7bor similar) and primary certificate (
.crtfile with randomized name) into that folder.
Add a Certificate Snap-in to the Microsoft Management Console (MMC)
- Click on your Start Menu, then click Run.
- In the prompt, type mmc and click OK.
- Click File, then click Add/Remove Snap-in.
- On the new window, click the Add button.
- On the new window, select Certificates and click Add.
- Select Computer account for the snap-in and click Next.
- Click Local computer and click Finish.
- Click Close on the Add Standalone Snap-in window.
- Click OK on the Add/Remove Snap-in window.
Import the Intermediate SSL Certificate
- In the MCC Console, click ▸ to expand Certificates (Local Computer).
- Right click on the Intermediate Certification Authorities folder, hover over All Tasks and click Import.
- On the new window, click Next.
- Click Browse, find your previously uploaded intermediate certificate file and click Open.
- Click Next, verify that the certificate information is proper and click Finish.
- Close the the import was successful notification.
Install your SSL with the Exchange Admin Center
- Access the Exchange Admin Center by opening a web browser and visiting https://localhost/ecp
- Log into your account with the Domain\user format for your username and the related password.
- On the left side bar, select Servers.
- At the end of top menu in the main section, select Certificates.
- Select your certificate with a status of Pending request in the main panel. This can be identified by the friendly name you chose when generating the CSR.
- On the right column, find the Status section and click Complete.
- On the new window, type out the network share folder's path and your
.crtfile name in the File to import from field and click ok.
Enable your SSL certificate
- In the main panel of the Certificates page, select your certificate with a status of Valid.
- Above the list of certificates, click the pencil icon to edit your certificate.
- On the new window, find the exchangecert section to the left and click Services.
- Select the services where you want the certificate enabled (for example: SMTP, IMAP, POP and IIS).
- Click save.
- Use our Certificate Checker to confirm the SSL is installed.
Note: As a courtesy, we provide information about how to use certain third-party products, but we do not endorse or directly support third-party products and we are not responsible for the functions or reliability of such products. Third-party marks and logos are registered trademarks of their respective owners. All rights reserved.