Exchange 2013 SSL certificate installation document

One 、 obtain SSL certificate

1.1、 choice SSL certificate

After applying for certificate from wotong , Will download a .zip The package , Unzip the package , obtain for Apache.zip、for Nginx.zip、for Other Server.zip Three packages ,Exchange 2013 The server needs for Nginx.zip in .crt File and create when applying for certificate CSR Process saved private key .key file .

1.2、 synthesis SSL certificate

because Exchange The server requires importing PFX Certificate in format , So we should synthesize the two files mentioned above .pfx File format , The specific steps are as follows ：

Synthesis tool download ：

https://download.wotrus.com/wotrus/wosigncode.exe

Download and run wosigncode.exe Tools , Click Certificate , Select the format of the conversion certificate , Original format pem, Target format pfx, Certificate file selection for Nginx.zip Decompressed .crt file , Private key select Create CSR Process saved private key .key file , Set up pfx password , Click Convert , Enter a name , Save it , The details are shown in the figure below ：

Be careful : The private key password is generally empty , If you create CSR Set the private key password , Then the private key password and PFX Please keep the password consistent with the previously set private key password .

Two 、 install SSL certificate

2.1、 Import SSL certificate

1. Log in to Exchange Server ( Please repeat the following steps for more than one ), Click on the start menu in the lower left corner , Input MMC, function mmc.exe, See Fig 1、2;

2. On the pop-up console interface , Click on “ file ”-“ Add delete snap in ”, See the picture 3;

3. On the left side of the newly pop-up interface “ Available snap ins ”, find “ certificate ”, Click... In the middle “ add to ”, choice “ Computer account ”-“ Local computer ”, See Fig 4、5、6;

4. Double click “ certificate ( Local computer )”, Right click “ personal ”, choice “ All the tasks ”-“ Import ”, See Fig 7;

5. Click on “ next step ”-“ Browse ”, choice “ Personal information exchange ”, Then select the previously synthesized .pfx Certificate import , See Fig 8;

6. choice pfx After certificate , Click on “ open ”-“ next step ”, Synthesize before input pfx The password set when , Click on “ next step ”, choice “ Depending on the certificate type , Automatically select the storage mechanism ”, Click on “ next step ”-“ complete ”, See Fig 9;

After importing the certificate , stay “ personal ”-“ certificate ” Under the table of contents , You can see the domain name certificate

After the above settings , Then you can go Exchange 2013 Assign certificates on the server ！

2.2、 Distribute SSL certificate

open Exchange 2013 Administrative console , stay “ The server ”-“ certificate ” in , Choose the right server , Find the imported certificate , Select this certificate , Click on “ edit ”.

Click on “ service ”, Assign Services , Check... By default IIS、SMTP、POP3、IMAP There are four services , Click on “ preservation ”.

Pop up the overwrite prompt , Click after confirmation “ yes ”：

thus , Certificate configuration is complete .

3、 ... and 、 test SSL visit

Open the browser , Input https://yourdomain.com（ The actual domain name bound by the certificate ）, For example, the browser address bar shows the encryption lock , It means that the certificate configuration is successful . If it shows that you cannot connect , Please ensure that policies such as firewall or security group are released 443 port （SSL configure port ）.

Four 、 Backup SSL certificate

Please download the .zip Compressed package and self generated private key .key File backup , In case of loss , Affect subsequent use ！