How to Install a TLS/SSL Certificate In Microsoft Exchange 2013

The following instructions will guide you through the SSL Certificate installation process on Microsoft Exchange 2013. If you have more than one server or device, you will need to install the certificate on each server or device you need to secure.

What You'll Need

  1. Your server certificate file
    This is the TrustCor certificate you received for your domain.
  2. Your intermediate certificate(s)
    These files allow the devices connecting to your server to identify TrustCor as the issuing CA. There may be more than one of these certificates. If you downloaded the pem-chain file, it will also contain the Intermediate certificate(s) bundled with your domain's certificate.
  3. Your private key
    This file should be on your server, or in your possession if you generated your CSR from a free generator tool. On certain platforms, such as Microsoft IIS, the private key is not immediately visible to you but the server is keeping track of it.

Installation Instructions

  1. Copy your certificate
    Copy your SSL Certificate to your Exchange Server's Network Share Folder.
    Note: This should be the same folder where you saved your CSR.
  2. Open the Exchange Admin Center
    This can be done by opening a browser and visiting:https://localhost/ecp
  3. Login
    Login to the Exchange Admin Center
  4. Select Servers
    In the left-hand column, select Servers, then select Certificates from the top-right menu.
  5. Select Complete
    Choose your SSL Certificate from the menu in the middle of the page, then select Complete.
  6. Enter the network path
    Enter the network path where your certificate file is located.
    For example:
     \\example\certs\your_domain_name.cer 
  7. Select OK
    Select OK, and your certificate will be installed on the server.

Enable Your Certificate

  1. Go back to the Exchange Admin Center
    To enable your SSL Certificate, go back to the Certificates section of the Exchange Admin Center (from Step 4).
  2. Select your certificate
    Select the Certificate you would like to enable and then click the Edit icon.
  3. Select your services
    Click the Services option and select the services you would like enabled for your SSL Certificate, then click the Save button.

Your certificate should now be installed. You can navigate to your site in a web browser to check for the padlock, or use an online SSL Checker tool to verify the installation. Remember, you may need to restart your server for changes to take effect.