Problem

How do I import a PKCS#12 (*.p12 or *.pfx) file onto Microsoft Exchange 2010 using the GUI?

Solution

This guide provides the steps taken to install an SSL certificate on Exchange 2010. These steps follow what need to be taken using the GUI (Graphical User Interface) of Exchange Management Console.

1. Start All Programs and in the Microsoft Exchange Server 2010 folder, select Exchange Management Console.


2. The console will load up.  Expand Microsoft Exchange On-Premises and click on Server Configuration on the left-hand pane.


3. In the Server Configuration section in the middle pane, you should see the name of your Exchange server.  Click and highlight it and then click on Import Exchange Certificate from the right hand pane.


4. A new window appears that resembles a Wizard with a heading of Import Exchange Certificate. Click on the Browse button and navigate to where you saved your PKCS#12 file.  This file should have an extension of *.p12 or *.pfx.


5. In the password field, enter in the password to unlock this PKCS#12 file.


6. Click on the Next button.

OCSP Stapling Support

Although optional, it is highly recommended to enable OCSP Stapling which will improve the SSL handshake speed of your website.

Windows Server 2008 automatically utilizes OCSP Stapling by default.  No additional configuration is required.

You can read up on more on OCSP Stapling at https://support.quovadisglobal.com/KB/a415/what-is-ocsp-stapling.aspx.