Manually install an SSL certificate on my Exchange Server 2013

After your certificate request is approved, you can download your certificate from the SSL manager and install it on your Microsoft Exchange Server 2013.

Copy your certificate files onto the server

1. Open the Exchange server's network share folder where your certificate and key files are stored, then upload your intermediate certificate (gd_iis_intermediates.p7b or similar) and primary certificate (.crt file with randomized name) into that folder.

Add a Certificate Snap-in to the Microsoft Management Console (MMC)

2. Click on your Start Menu, then click Run.
3. In the prompt, type mmc and click OK.
4. Click File, then click Add/Remove Snap-in.
5. On the new window, click the Add button.
6. On the new window, select Certificates and click Add.
7. Select Computer account for the snap-in and click Next.
8. Click Local computer and click Finish.
9. Click Close on the Add Standalone Snap-in window.
10. Click OK on the Add/Remove Snap-in window.

Import the Intermediate Certificate Authority Certificate

11. In the MCC Console, click ▸ to expand Certificates (Local Computer).
12. Right click on the Intermediate Certification Authorities folder, hover over All Tasks and click Import.
13. On the new window, click Next.
14. Click Browse, find your previously uploaded intermediate certificate file and click Open.
15. Click Next, verify that the certificate information is proper and click Finish.
16. Close the the import was successful notification.

Install your SSL with the Exchange Admin Center

17. Access the Exchange Admin Center by opening a web browser and visiting https://localhost/ecp
18. Log into your account with the Domain\user format for your username and the related password.
19. On the left side bar, select Servers.
20. At the end of top menu in the main section, select Certificates.
21. Select your certificate with a status of Pending request in the main panel. This can be identified by the friendly name you chose when generating the CSR.
22. On the right column, find the Status section and click Complete.
23. On the new window, type out the network share folder's path and your .crt file name in the File to import from field and click ok.

Enable your SSL certificate

24. In the main panel of the Certificates page, select your certificate with a status of Valid.
25. Above the list of certificates, click the pencil icon to edit your certificate.
26. On the new window, find the exchangecert section to the left and click Services.
27. Select the services where you want the certificate enabled (for example: SMTP, IMAP, POP and IIS).
28. Click save.

Next step

• Use our Certificate Checker to confirm the SSL is installed.

More info

• Renewing your SSL certificate.

Note: As a courtesy, we provide information about how to use certain third-party products, but we do not endorse or directly support third-party products and we are not responsible for the functions or reliability of such products. Third-party marks and logos are registered trademarks of their respective owners. All rights reserved.