how to use a self signed certificate in exchange 2010.pdf

7/29/2019 How to Use a Self Signed Certificate in Exchange 2010.pdf

1/29

How to Use a Self Signed Certificate in

Exchange 2010

We can use a self signed certificated for Exchange 2010 ,

Now will learn how to do it.

Something which you need to know is , Using a self signed certificate you need to install the certificates on every

machine you use and Mobile devices other wise you will end up in a certificate error in the IE

So thats why people prefer going for a 3rd party certificate to overcome it.

Will Learn using a Self Signed Certificate , for this to be used Externally you need to have a CNAME record in your

public DNS pointing to your Public IP NAT to your CAS

First we will learn how to Export a Certificate request file from Exchange 2010 ,

Step 1:

Type a Friendly Name :
http://careexchange.in/wp-content/uploads/2012/02/image21.pnghttp://careexchange.in/wp-content/uploads/2012/02/image21.pnghttps://twitter.com/share


2/29

Wild Card is used for Very Big Environment .For Example : *.Domain.com
http://careexchange.in/wp-content/uploads/2012/02/image22.pnghttp://careexchange.in/wp-content/uploads/2012/02/image22.png


3/29

Step 2:

Assign the required Services for your Exchange , Give a Tick Mark
http://careexchange.in/wp-content/uploads/2012/02/image23.pnghttp://careexchange.in/wp-content/uploads/2012/02/image23.pnghttp://careexchange.in/wp-content/uploads/2012/02/image23.pnghttp://careexchange.in/wp-content/uploads/2012/02/image23.pnghttp://careexchange.in/wp-content/uploads/2012/02/image23.png


4/29

You will opt for it if you are planning for Coexistence in OWA in Exchange 2003 and Exchange 2010

Step 3:

You will see the collection for URLs


5/29

Step 4:

Fill out the Form And set the location for the Cert Request file


6/29


7/29

Step 5:

Your request file would look like this

Open it via Notepad , because we need this content to generate a Certificate


8/29

Step 6:

You need to have this role installed to have a Certificate Authority , It can be DC or Exchange it self

I have done this in the Exchange itself (No Harm)
http://careexchange.in/wp-content/uploads/2012/02/image30.pnghttp://careexchange.in/wp-content/uploads/2012/02/image30.pnghttp://careexchange.in/wp-content/uploads/2012/02/image30.pnghttp://careexchange.in/wp-content/uploads/2012/02/image30.png


9/29

Step 7:

Choose : Certification authority , Certification Authority Web Enrollment


10/29

Step 8:

Choose Enterprise


11/29

Step 9:

Choose Root CA


12/29

Step 10:

Create a new Private key


13/29

Step 11:

Have this Default with 2048 key Character length


14/29

Step 12:

Click Next


15/29

Step 13:

By Default Certificate is valid for 5 years , Dont make any changes on it , Click next


16/29

Step 14:


17/29

Step 15:

Now if you Open IIS manager , you will see CertSrv a Virtual Directory Created ,

Use the right side column Browse *.443(https)

Step 16:


18/29

You would see a page like this , Choose Request a Certificate

Step 17:

Click on Advanced Certificate Request

Step 18:

Choose the Second one

Submit a certificate request by using a base-64-Encoded CMC


19/29

Step 19:

Now Copy the Note pad -

Choose Template : WebServer


20/29

Step 20:

Choose Base 64 encoded

Step 21:

Save the Certificate


21/29

Step 22:

Now go to your EMC

Server Configuration Complete Pending request

Chose the Certificate :
http://careexchange.in/wp-content/uploads/2012/02/image46.pnghttp://careexchange.in/wp-content/uploads/2012/02/image48.pnghttp://careexchange.in/wp-content/uploads/2012/02/image48.pnghttp://careexchange.in/wp-content/uploads/2012/02/image47.pnghttp://careexchange.in/wp-content/uploads/2012/02/image47.pnghttp://careexchange.in/wp-content/uploads/2012/02/image46.pnghttp://careexchange.in/wp-content/uploads/2012/02/image46.pnghttp://careexchange.in/wp-content/uploads/2012/02/image46.pnghttp://careexchange.in/wp-content/uploads/2012/02/image46.png


22/29

Step 23:

Now Assign Services to the Certificate


23/29


24/29

Now the Server Part is ready

Step 24:

Now will learn how to install the Certificate in the Client End

Double Click on the Certificate

Click Install Certificate Click Next


25/29

Choose Personal


26/29

Click Next And Import will be Successful

Now Do the Same Process


Click Install Certificate Click Next Choose Trusted Root Certification Authorities


27/29


Click Install Certificate Click Next Choose Intermediate Certification Authorities


28/29

Step 25:

Before

After installing the Certificate in the Client
http://careexchange.in/wp-content/uploads/2012/02/image55.pnghttp://careexchange.in/wp-content/uploads/2012/02/image56.pnghttp://careexchange.in/wp-content/uploads/2012/02/image56.pnghttp://careexchange.in/wp-content/uploads/2012/02/image55.pnghttp://careexchange.in/wp-content/uploads/2012/02/image55.pnghttp://careexchange.in/wp-content/uploads/2012/02/image55.png


29/29

Great !!

Now you learn how to use a Self Signed Certificate in Exchange 2010

Regards

Satheshwaran Manoharan

how to use a self signed certificate in exchange 2010.pdf

Documents