Ask a Question

Solution ID : SO14293

Last Modified : 05/18/2018

Installation Instructions for Microsoft Exchange 2007

Solution

This document provides instructions for installing a SSL certificate on Microsoft Exchange 2007. If you are unable to use these instructions for your server, RapidSSL recommends that you contact Microsoft.
 

Select the correct installation instructions based on the following certificate criteria below:

RapidSSL Security Center
Certificates enrolled on or after November 10, 2017

Partner issued certificates
Certificates enrolled on or after November 10, 2017
 
 
 
Step 1:  Download the SSL certificate
  1. Download your certificate from the unique secure link we provide your technical contact via order fulfillment email.
  2. The ZIP file you download contain the SSL and Intermediate CA certificate in PKCS#7 file (i.e. ssl_certificate.p7b).
  3. Unzip the files onto the server where you will install the certificate.

Step 2: Install the SSL certificate:

To install the SSL certificate into a Microsoft Exchange 2007 server, you will need to use the Exchange Management Shell (EMS). 

  1. Copy the SSL certificate file, for example ssl_certificate.p7b and save it to C: on your Exchange server.
  2. Open the EMS: Click Start > Programs > Microsoft Exchange Server 2007> EMS.
  3. Run the Import-ExchangeCertificate and Enable-ExchangeCertificate commands together (both commands are run on the same line, separated by a pipe character).

    Import-ExchangeCertificate -Path C: ewcert.p7b | Enable-ExchangeCertificate -Services

    "SMTP, IMAP, POP, IIS"


    Note: The Services option can be any combination of these values: IMAP, POP, UM, IIS, SMTP.
               To disable a certificate, set the Services parameter to 'None'. For more information regarding
               the Exchange commands, refer to this Microsoft Knowledge base article.
     
  4. Verify that the certificate is enabled by running the Get-ExchangeCertificate command

    C:> Get-ExchangeCertificate -DomainName your.domain.name


     
  5. In the Services column, letters SIP and W stand for SMTP, IMAP, POP3 and Web (IIS)

    Note: If the certificate is not properly enabled, re-run the Enable-ExchangeCertificate command by pasting the thumbprint of the certificate as the -ThumbPrint argument such as:

    Enable-ExchangeCertificate -ThumbPrint [paste] -Services "SMTP, IMAP, POP, IIS"
     
  6. Test the certificate by connecting to the server with Internet Explorer, ActiveSync, or Outlook.

    Note: If using ISA 2004 or ISA 2006, a reboot is recommended. It has been reported that ISA services won't send the intermediate certificate until after a reboot.


Step 3: Verify certificate installation

  1. To verify if your certificate is installed correctly, use the RapidSSL Certificate Installation Checker
 
 
 
 
Step 1: Download the RapidSSL certificate.

To download a RapidSSL Certificate from the User Portal, perform the steps bellow:

  1. Visit the RapidSSL User Portal
  2. Provide the Common Name or Order Number, Technical Contact Email Address associated with the certificate order and the Image Number generated from the GeoTrust User Authentication page. 

    Note:  If access is requested using the Common Name there will be a list of order numbers for that domain.  Please select the most recent order.  Any previous orders that are listed can not be used to download the certificate.  If access is requested with an Order Number, an email will be sent to access that order.
     
  3. Select Request Access against the correct order ID.
  4. An email will be sent to the Technical Contact email address specified.
  5. Click on the link listed in the email to enter the User Portal
  6. Click View Certificate Information.
  7. Select the PKCS#7 format from the drop down menu.
 
Step 2: Install the SSL certificate:
 

To install the SSL certificate into a Microsoft Exchange 2007 server, you will need to use the Exchange Management Shell (EMS). 

  1. Copy the SSL certificate file, for example ssl_certificate.p7b and save it to C: on your Exchange server.
  2. Open the EMS: Click Start > Programs > Microsoft Exchange Server 2007> EMS.
  3. Run the Import-ExchangeCertificate and Enable-ExchangeCertificate commands together (both commands are run on the same line, separated by a pipe character).

    Import-ExchangeCertificate -Path C: ewcert.p7b | Enable-ExchangeCertificate -Services

    "SMTP, IMAP, POP, IIS"


    Note: The Services option can be any combination of these values: IMAP, POP, UM, IIS, SMTP.
               To disable a certificate, set the Services parameter to 'None'. For more information regarding
               the Exchange commands, refer to this Microsoft Knowledge base article.
     
  4. Verify that the certificate is enabled by running the Get-ExchangeCertificate command

    C:> Get-ExchangeCertificate -DomainName your.domain.name


     
  5. In the Services column, letters SIP and W stand for SMTP, IMAP, POP3 and Web (IIS)

    Note: If the certificate is not properly enabled, re-run the Enable-ExchangeCertificate command by pasting the thumbprint of the certificate as the -ThumbPrint argument such as:

    Enable-ExchangeCertificate -ThumbPrint [paste] -Services "SMTP, IMAP, POP, IIS"
     
  6. Test the certificate by connecting to the server with Internet Explorer, ActiveSync, or Outlook.

    Note: If using ISA 2004 or ISA 2006, a reboot is recommended. It has been reported that ISA services won't send the intermediate certificate until after a reboot.


Step 3: Verify certificate installation

  1. To verify if your certificate is installed correctly, use the RapidSSL Certificate Installation Checker


Microsoft

             For more information regarding the Exchange Management Shell, refer to Microsoft Support