Manually install an SSL certificate on my Exchange Server 2010

After your certificate request is approved, you can download your certificate from the SSL manager and install it on your Microsoft Exchange Server 2010.

Copy your certificate files onto the server

1. Find the directory on your server where certificate and key files are stored, then upload your intermediate certificate (gd_iis_intermediates.p7b or similar) and primary certificate (.crt file with randomized name) into that folder.

Add a Certificate Snap-in to the Microsoft Management Console (MMC)

2. Click on your Start Menu, then click Run.
3. In the prompt, type mmc and click OK.
4. Click File, then click Add/Remove Snap-in.
5. On the new window, click the Add button.
6. On the new window, select Certificates and click Add.
7. Select Computer account for the snap-in and click Next.
8. Click Local computer and click Finish.
9. Click Close on the Add Standalone Snap-in window.
10. Click OK on the Add/Remove Snap-in window.

Import the Intermediate SSL Certificate

11. In the MCC Console, click ▸ to expand Certificates (Local Computer).
12. Right click on the Intermediate Certification Authorities folder, hover over All Tasks and click Import.
13. On the new window, click Next.
14. Click Browse, find your previously uploaded intermediate certificate file and click Open.
15. Click Next, verify that the certificate information is proper and click Finish.
16. Close the the import was successful notification.

Install your SSL with the Exchange Management Console

17. Click on your Start Menu, then click Programs.
18. Click to expand the Microsoft Exchange 2010 folder, then click Exchange Management Console.
19. In the left navigation panel, click Microsoft Exchange On-Premises.
20. On the main panel, find the Organization Summary section and click Manage databases.
21. In the left navigation panel, click to expand Microsoft Exchange On-Premises, then click Server Configuration.
22. On the main panel, find the Exchange Certificates section and click to select your certificate.
23. In the right Actions panel, find your certificate section and click Complete Pending Request.
24. On the new window, click Browse, find your previously uploaded primary certificate file and click Open.
25. Click Complete.

Note: If you see an error stating “The source data is corrupted or not properly Base64 encoded”, press the F5 button on your keyboard to refresh console. Verify that your certificate displays False in the main panel under the Self Signed column. If you see True, you'll want to create a new Certificate Signing Request (CSR) and re-key your certificate.

26. Click Finish.

Enable your SSL certificate

27. On the main panel, find the Exchange Certificates section and click to select your certificate.
28. In the right Actions panel, find your certificate section and click Assign Services to Certificate.
29. On the new window, select your server and click Next.
30. Select the services where you want the certificate enabled (for example: SMTP, IMAP, POP and IIS).
31. Click Next, then click Assign.
32. Click Finish.

Next step

• Use our Certificate Checker to confirm the SSL is installed.

More info

• Renewing your SSL certificate.

Note: As a courtesy, we provide information about how to use certain third-party products, but we do not endorse or directly support third-party products and we are not responsible for the functions or reliability of such products. Third-party marks and logos are registered trademarks of their respective owners. All rights reserved.