How to install an SSL/TLS certificate on Microsoft Exchange 2016
The instructions below walk you through installing SSL on Microsoft Exchange 2016 (EAC). If you have not generated your certificate or finished validation yet, see our Exchange 2016 CSR generation instructions.
What you will need
1. Your server certificate
This is the certificate the certificate authority issued for your domain. It may have been emailed to you. If not, you can download it from your account dashboard by clicking on your order.
2. Your intermediate certificates
These files let devices connecting to your server identify the issuing certificate authority. There may be more than one of them. If your certificate arrived in a ZIP folder, the intermediates — sometimes called the CA bundle — should be in there too. If not, download the right CA bundle for your certificate.
3. Your private key
This file should be on your server, or in your hands if you generated your CSR with a free generator tool. Neither TiendaSSL nor the certificate authority ever asks for or keeps your private key.
SSL/TLS certificate installation instructions for Microsoft Exchange 2016
1. Save the SSL file to the server
Copy your domain's SSL certificate into the Exchange 2016 server's network share, where the CSR was saved.
2. Log in to the Exchange Admin Center
Open your Exchange Admin Center (EAC) in a browser using your server's URL — that is, https://localhost/ecp.
Log in to the Exchange Admin Center with your domain, username and password.
3. Complete the "Pending request"
In the EAC, in the left sidebar, click Servers, then at the top of the page click Certificates.
Certificates: in the middle pane, select your certificate request, listed by its friendly name.
On the right, in the certificate request details pane, find Status and click Complete.
4. Give the path to the saved certificate
Complete pending request wizard: under File to import from, enter the UNC path to your SSL file. Click OK.
The certificate should now be installed, and the certificate request's status should read Valid.
5. Enable the SSL/TLS certificate for Exchange services
On the Certificates page, select the installed SSL certificate and click the pencil icon.
Certificate window: click Services.
Tick every service that should use the SSL certificate and click Save.
Your SSL should now be enabled on all the services you selected on your Exchange 2016 server.
