How to Install a TLS/SSL Certificate In Microsoft Exchange 2016

The following instructions will guide you through the SSL Certificate installation process on Microsoft Exchange 2016. If you have more than one server or device, you will need to install the certificate on each server or device you need to secure.

What You'll Need

  1. Your server certificate file
    This is the TrustCor certificate you received for your domain.
  2. Your intermediate certificate(s)
    These files allow the devices connecting to your server to identify TrustCor as the issuing CA. There may be more than one of these certificates. If you downloaded the pem-chain file, it will also contain the Intermediate certificate(s) bundled with your domain's certificate.
  3. Your private key
    This file should be on your server, or in your possession if you generated your CSR from a free generator tool. On certain platforms, such as Microsoft IIS, the private key is not immediately visible to you but the server is keeping track of it.

Installation Instructions

  1. Copy your certificate
    Copy your SSL Certificate to your Exchange Server's Network Share Folder.
    Note: This should be the same folder where you saved your CSR.
  2. Open the Exchange Admin Center (EAC)
    This can be done by opening a web browser and browsing to the URL of your server: https://localhost/ecp
  3. Login
    Login to the Exchange Admin Center by entering your Domain/user name and Password on the credentials page, and then click sign in.
  4. Select Servers
    In the sidebar menu of the left-hand column of the EAC, select Servers, then select Certificates from the menu at the top of the page.
  5. Select Complete
    Choose your SSL Certificate request from the menu in the middle of the page, then in the certificate request details pane to the right (under Status) select Complete.
    Note: Certificate request are listed by their friendly names.
  6. Enter the network path
    In the complete pending request wizard, under *File to import, enter the network path where your certificate file is located.
    For example: 
     \\example\certificates\your_domain_name.cer
  7. Select OK
    Select OK, and your certificate will be successfully installed on your Exchange 2016 server, and the status of your certificate request should now be Valid.

Assign Services for Your Certificate

  1. Go back to the Exchange Admin Center
    To enable your SSL Certificate, go back to the Certificates section of the Exchange Admin Center.
  2. Select your certificate
    Select the Certificate you just installed and then click the Edit icon (looks like a pencil).
  3. Select your services
    Click the Services option and check all the services you would like enabled for your SSL Certificate, then click the Save button. Your certificate should now be enabled for the services you selected on your Exchange 2016 server.

Your certificate should now be installed. You can navigate to your site in a web browser to check for the padlock, or use an online SSL Checker tool to verify the installation. Remember, you may need to restart your server for changes to take effect.