Ask a Question

Installation instructions for Microsoft Exchange 2010 server

Solution

This document was created to assist with the use of an SSL certificate in Microsoft Exchange 2010.  If this document can not be used within the environment, RapidSSL recommends contacting an organization that supports Microsoft Exchange 2010.
 

Select the correct installation instructions based on the following certificate criteria below:

RapidSSL Security Center
Certificates enrolled on or after November 10, 2017

Partner issued certificates
Certificates enrolled on or after November 10, 2017


 

 
Step 1:  Download the SSL certificate
  1. Download your certificate from the unique secure link we provide your technical contact via order fulfillment email.
  2. The ZIP file you download contain the SSL and Intermediate CA certificate in PKCS#7 file (i.e. ssl_certificate.p7b).
  3. Unzip the files onto the server where you will install the certificate.

Step 2: Install the SSL certificate
  1. Start the Exchange Management Console (EMC) by going to Start > Programs > Microsoft Exchange 2010 > EMC.
  2. Select Manage Databases, and then select Server configuration.
  3. Select the certificate from the center menu (listed by its Friendly Name), and then select Complete Pending Request from the Actions menu.
  4. Browse to the certificate file, then select Open > Complete.

    Note: Occasionally Exchange 2010 will display the error message "The source data is corrupted or not properly Base64 encoded." Please ignore this error.  Although the error may appear,  the certificate often still installs correctly. Press the F5 key to refresh the certificate and verify that it now says False under Self Signed. If it still shows True, the wrong certificate may have been selected or the request may have been generated on a different server. To resolve this issue, create a new  CSR on the Exchange server and replace the certificate.


     
  5. To enable the certificate, go back to the Exchange Management Console.
  6. Select Manage Databases, and then select Server configuration and click on the link Assign Services to Certificate.


     
  7. Select the services for which the certificate must be enabled then click Next > Assign > Finish.
  8. The certificate is now installed and enabled for use with Exchange 2010

    Note: If using ISA 2004 or ISA 2006, a reboot is recommended. It has been reported that ISA services won't send the intermediate certificate until after a reboot. 

 

Step 3: Verify certificate installation

  1. To verify if your certificate is installed correctly, use the RapidSSL Certificate Installation Checker



Partner issued certificates - Certificates enrolled on or after November 10, 2017

Step 1: Download the SSL certificate

To download a RapidSSL Certificate from the User Portal, perform the steps bellow:

  1. Visit the RapidSSL User Portal
  2. Provide the Common Name or Order Number, Technical Contact Email Address associated with the certificate order and the Image Number generated from the GeoTrust User Authentication page. 

    Note:  If access is requested using the Common Name there will be a list of order numbers for that domain.  Please select the most recent order.  Any previous orders that are listed can not be used to download the certificate.  If access is requested with an Order Number, an email will be sent to access that order.
     
  3. Select Request Access against the correct order ID.
  4. An email will be sent to the Technical Contact email address specified.
  5. Click on the link listed in the email to enter the User Portal
  6. Click View Certificate Information.
  7. Select the PKCS#7 format from the drop down menu.
     

Step 2: Install the SSL certificate

  1. Start the Exchange Management Console (EMC) by going to Start > Programs > Microsoft Exchange 2010 > EMC.
  2. Select Manage Databases, and then select Server configuration.
  3. Select the certificate from the center menu (listed by its Friendly Name), and then select Complete Pending Request from the Actions menu.
  4. Browse to the certificate file, then select Open > Complete.

    Note: Occasionally Exchange 2010 will display the error message "The source data is corrupted or not properly Base64 encoded." Please ignore this error.  Although the error may appear,  the certificate often still installs correctly. Press the F5 key to refresh the certificate and verify that it now says False under Self Signed. If it still shows True, the wrong certificate may have been selected or the request may have been generated on a different server. To resolve this issue, create a new  CSR on the Exchange server and replace the certificate.


     
  5. To enable the certificate, go back to the Exchange Management Console.
  6. Select Manage Databases, and then select Server configuration and click on the link Assign Services to Certificate.


     
  7. Select the services for which the certificate must be enabled then click Next > Assign > Finish.
  8. The certificate is now installed and enabled for use with Exchange 2010.

    Note: If using ISA 2004 or ISA 2006, a reboot is recommended. It has been reported that ISA services won't send the intermediate certificate until after a reboot. 


Step 3: Verify certificate installation

  1. To verify if your certificate is installed correctly, use the RapidSSL Certificate Installation Checker



Microsoft
     
           For more information, refer to the Microsoft Knowledge base