Knowledge Base

How to install an SSL Certificate on Exchange 2013

Enabling an SSL certificate with Exchange 2013 (Microsoft Exchange Server 2013) is an important step for securing email communications by encrypting the data transferred between your server and users. This guide explains what an SSL certificate does and provides step-by-step instructions to install and enable it.

Important: This article applies to customers with active SSL services only.

In this article, we will cover:

What is SSL for Exchange 2013?

A Secure Sockets Layer (SSL) certificate acts as a digital lock for your Exchange server. It encrypts all data, such as emails, attachments, and login credentials, that travels between the server and a user's client program. This ensures that sensitive information remains private and secure from unauthorized access.

 

Key benefits of enabling SSL

  • Trust and credibility: Secure sites display a padlock icon to reassure visitors of a safe connection.
  • Search engine rankings: Using SSL is a factor in improving your site’s visibility on Google.
  • Data protection: SSL protects the integrity of information exchanged between users and your site.
  • Professional appearance: A secure site environment is essential for building trust and encouraging online sales.

 

Prerequisites for installation

Before you begin, download the ZIP file containing your certificate and locate the file named your_domain_name.cer. Copy this file to your Exchange server's network share folder (this is often the same location where you saved the CSR).

 

Step-by-step installation guide

  1. Access the Exchange Admin Center through a web browser and navigating to https://localhost/ecp.
  2. Log in using your Domain\user name and password.
  3. In the left-hand menu, click Servers, and then select the Certificates tab at the top.
  4. From the list in the center pane, select the certificate identified by the "Friendly Name" you created during the CSR generation. Its status should be "Pending request."
  5. In the right-hand column, click the Complete link.

    Complete link in Exchange 2013 Admin Center
     
  6. In the new window, enter the full network share path to your certificate file (e.g., `\\YourServer\share\your_domain_name.cer`) and click OK.

    Entering the network path to the certificate file
     
  7. The certificate's status should now change to "Valid." To activate it, select the certificate again and click the Edit (pencil) icon.

    Edit icon for the certificate
     
  8. In the edit window, click the Services tab on the left.
  9. Check the boxes for the services you want to secure with this certificate (e.g., SMTP, IMAP, POP, IIS). Click Save.

    Assigning services to the certificate

You have successfully installed and enabled your SSL certificate with Exchange 2013, actively securing your services.

Note: If you ever need to export your certificate, ensure to include all certificates in the certification chain when prompted. Otherwise, the certificate will not function correctly.

 

Review

By following this guide, you have learned how to install your SSL certificate with Exchange 2013 in the Exchange Admin Center and assign it to the appropriate services. This process encrypts your server's communications, enhances security, and builds trust with your users by protecting their data.