This document provides instructions for generating a Certificate Signing Request (CSR) for Exchange 2003.
If you are unable to use these instructions for your server, Symantec recommends that you contact Microsoft
To install a SSL Certificate in Microsoft Exchange 2003 follow the instructions below:
|This solution contains two Methods to install your SSL Certificate:
Method 1: Installing the certificate received via e-mail.
Method 2: Installing the certificate downloaded from Managed PKI for SSL subscriber service page.
Method 1: Download and Install SSL certificate sent via e-mail
Step 1: Obtain the SSL certificate sent via email:
- Once your Managed PKI for SSL administrator has approved your Certificate request, you will receive an email
with the Certificate attached (cert.cer), as well as in the body of the email itself.
- Copy the SSL certificate and make sure to copy the -----BEGIN CERTIFICATE----- and -----END CERTIFICATE-----
header and footer. Ensure there are no white spaces, extra line breaks or additional characters.
- Use a plain text editor such as Notepad, paste the content of the certificate and save it with extension .txt
NOTE: If you selected Microsoft IIS 5.0 or above during enrollment, continue with the installation from here
- If you are not sure which server software was selected during the enrolment, proceed with Step 2 bellow.
Step 2: Download and Install the Intermediate CAs:
To download and install the Intermediate CAs follow the steps from this link: SO22016
Step 3: Install the SSL certificate:
To proceed with the installation steps for your SSL certificate click here
Method 2: Download and Install SSL certificate in PKCS#7 format
Step 1: Download the SSL certificate from Managed PKI for SSL subscriber services page:
Download the certificate from Managed PKI for SSL subscriber services page by following the steps from this link: SO6621
Make sure you download the certificate in PKCS#7 format and save it with the extension .txt or .p7b
- Click Start > Programs > Microsoft Exchange > System Manager
- If the Display administrative groups option is turned on, expand Administrative Groups, then expand First Administrative Group
(where First Administrative Group is the name of your administrative group)
NOTE: To display administrative groups, right-click Your_Organization > Properties > Display administrative groups check box,
click OK twice, and then restart Exchange System Manager
- Expand Servers, expand the Exchange Server container that you want to configure, and then expand the Protocols container
- Expand each protocol that you want to configure, right-click the Default Protocol_Name virtual server object click Properties
- Click the Access tab > Certificate
- The Web Server Certificate Wizard starts and you receive notification that you have a pending certificate request, click Next
- On the Pending Certificate Request page, click Process the pending request and install the certificate, and then click Next
- In the Process a Pending Request box, type the path of the certificate that you received from the external CA
- Review the Certificate Summary page, and then click Next
NOTE: The information that is contained in the certificate includes issuer, expiry date, what the certificate is to be used for.
The certificate friendly name that appears on the Certificate Summary page is also included.
- After you receive notification that the certificate is successfully installed on the virtual server, click Finish
- Verify your installation with the Symantec Installation Checker
These instructions are extracted from following Microsoft Article