Installing an SSL Certificate in Microsoft Exchange Server 2010

Exchange server 2010 requires a Multiple Domain (UCC) Certificate to run all services securely.

To Install an SSL Certificate in Microsoft Exchange 2010

1. To install the intermediate certificate, click Start, and then click Run..
2. Type mmc, and then click OK. The Microsoft Management Console (Console1) window opens.
3. In the Console1 window, click File, and then select Add/Remove Snap-in.
4. In the Add or Remove Snap-ins window, select Certificates, and then click Add.
5. In the Computer Account window, select Computer Account, and then click Next.
6. In the Select Computer window, select Local Computer, and then click Finish.
7. In the Add or Remove Snap-ins window, click OK.
8. In the Console1 window, click + to expand the Certificates (Local Computer) folder on the left.
9. Right-click Intermediate Certification Authorities, mouse over All Tasks, and then click Import.
10. In the Certificate Import Wizard window, click Next.
11. Click Browse to find the intermediate certificate file.
12. In the Open window, change the file extension filter to PKCS #7 Certificates (*.spc;*.p7b), select the *_iis_intermediates.p7b file, and then click Open.
13. In the Certificate Import Wizard window, click Next.
14. Select Place all certificates in the following store, and then click Browse.
15. In the Select Certificate Store window, select Intermediate Certification Authorities, and then click OK.
16. In the Certificate Import Wizard window, click Next.
17. Click Finish.
18. Click OK.
19. Close the Console1 window, and then click No to remove the console settings.
20. To install the primary certificate, click Start, click All Programs, Microsoft Exchange Server 2010, and then click Exchange Management Console.
21. In the Exchange Management Console, click Microsoft Exchange On-Premises, and then click Manage Databases.
22. Click Server Configuration.
23. In Exchange Certificates, select your certificate, and then, from the Actions panel on the right, click Complete Pending Request.
24. In the Complete Pending Request window, click Browse to locate the certificate file.
25. In the Open window, select All Files(*.*) as your file name extension, select your certificate (it might be saved as a .txt, .cer, or .crt), and then click Open.
26. In the Complete Pending Request window, click Complete.
    
    NOTE: If you receive the error, "The source data is corrupted or not properly Base64 encoded," check the Self Signed field. If it is True, refresh console by pressing F5 on your keyboard. If it still displays True, create a new CSR and then re-key your certificate.
27. Click Finish.
28. In the Exchange Management Console, select your certificate in Exchange Certificates.
29. From the Actions menu, click Assign Services to Certificate.
30. In the Assign Services to Certificate window, select the servers you want to assign services to, and then click Next.
31. Select services you want to assign to the certificate, and then click Next.
32. Click Assign.
33. Click Finish.

Your SSL Certificate is installed. If you have problems, please see Where can I get information about my SSL's configruation?.