Home > Exchange > How to create a SSL certificate for Exchange 2013

How to create a SSL certificate for Exchange 2013


 

In this Demo LAB I will show you how to create a SSL certificate for below Subject Alternative Names from internal CA.

  • webmail.valakulu.net
  • autodiscover.valakulu.net
  • VE2K13.valakulu.net
  • valakulu.net

1. Access Exchange Control Panel

image 

 

2. Navigate to Servers –> Certificate

image

 

3. Click “+” mark to start the certificate creation wizard –> Click Next

image

 

4. Enter a friendly name for the certificate

image

 

5. Do not choose wildcard option, just hot next button

image

 

5. Browse to choose the Exchange server. This is the server which holds the pending certificate until Internal Certificate Authority issue a valid certificate –> Next

image

 

6. Click edit icon and enter domain names which we have selected –> Click ok –> Next

image

 

7. CA will not issue any certificate for server NETBIOS name so you should remove the NETBIOS name from the below list –> Click Next

image

 

image

 

8. Fill required information and click Next

image

 

9. Provide the UPN path to save the .Req file

image

 

You can see the pending certificate on the certificate TAB

image

 

10. You can view the .REQ file using a notepad as below.

image

Note: As the best practice you have to purchase a public SSL certificate from a certificate provider such as Digicert.

 

11. Go to Internal Certificate Authority

image

 

12. Click Request a Certificate –> Advance Certificate Request

image

 

13. Select Submit a certificate request by using a base-64-Encoded CMC

image

 

14. Copy Certificate Request code to “Base-64-encoded certificate request
(CMC or PKCS #10 or PKCS #7)”

Select Web Server under certificate template row then click Submit

image

 

15. Let’s download the certificate by selecting “Base64 Encoded” radio button

image

 

16. Copy the created certificate to the Exchange server

17. To complete the certificate assigning process click complete link as below

image

 

18. Provide the UNC path of the saved certificate

image

 

19. Once the certificate is successfully installed you can see the status as Valid,

 

image

Advertisements
Categories: Exchange
  1. No comments yet.
  1. No trackbacks yet.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: