Tuesday, March 1, 2011

How to Configure Exchange 2010 Certificate

After installing Exchange 2010 the we need to configure a new certificate for some services. Although Exchange 2010 comes with enabled self signed certificates. It is recommended that u signed a new proper certificate and stop the annoying warnings that announce u on the certificate authority is not trusted.

The first thing we can notice in exchange 2010 that is different from exchange 2007 is the new GUI for configuring a certificate.

The New Exchange Certificate wizard can be launched after marking the server object in the Exchange Management Console as shown below.

On the first page give the certificate a name to identify it and click Next

Here you have a few options about Exchange 2010 options which that can use certificates. Generally they are prompted with some default settings.

I setup OWA address to be mail.eldad.co.il both internal and external

I setup ActiveSync to use mail.eldad.co.il

I setup the web services to use mail.eldad.co.il and to use the default autodiscover URL 

I didn’t choose IMAP or POP

I setup Unified messaging to use a public cert

I enabled TLS and opted for the default smtp.eldad.co.il for the connector FQDN

Click Next
On the certificate organization and location info page fill in the organization details and click Next

Click New

Now the request file is created


The certificate request is created and the next step is to approve the certificate with a certificate authority (online with a company or by your own certificate authority).
After receiving the certificate approved we will proceed in getting it installed. Click the Complete Pending Request .

Choose the certificate file received from the CA.

After the process is finished click Finish

Now we need to activate the certificate for the desire services .click on Assign Services to Certificate.

Choose the desire services and click Assign.

You may be prompted to replace the existing SMTP certificate in which case you should accept!
Click Finish

Click Finish
Now you have a new Certificate assign to your exchange 2010 services

0 comments

Post a Comment