Install – Microsoft Exchange 2007

To install a SSL certificate onto Microsoft Exchange 2007, you will need to use the Exchange Management Shell.

1. Copy the SSL certificate from the e-mail to notepad and save it as newcert.p7b to C:\ on your Exchange server.

2. Open the Exchange Management Shell.

3. Click Start > Programs > Microsoft Exchange Server 2007 > Exchange Management Shell.

4. Run the Import-ExchangeCertificate and Enable-ExchangeCertificate commands together (both commands are run on the same line, separated by a pipe character).

Import-ExchangeCertificate -Path C:\newcert.p7b | Enable-ExchangeCertificate -Services “SMTP, IMAP, POP, IIS”

Note: The Services option can be any combination of these values: IMAP, POP, UM, IIS, SMTP. To disable a certificate, set the Services parameter to ‘None’.

For more information regarding the Exchange commands, please refer to this Microsoft Knowledge base article.

5. Verify that your certificate is enabled by running the Get-ExchangeCertificate command.

C:\> Get-ExchangeCertificate -DomainName

In the Services column, letters SIP and W stand for SMTP, IMAP, POP3 and Web (IIS).

Note: If your certificate isn’t properly enabled, you can re-run the Enable-ExchangeCertificate command by pasting the thumbprint of your certificate as the -ThumbPrint argument such as:

Enable-ExchangeCertificate -ThumbPrint [paste] -Services “SMTP, IMAP, POP, IIS”

6. Test your certificate by connecting to your server with IE, ActiveSync, or Outlook.

Note: If using ISA 2004 or ISA 2006, you need to reboot your servers. It has been reported that ISA services won’t send the intermediate certificate until after a reboot.

For more information regarding the Exchange Management Shell, please refer to this Microsoft Knowledge base article: