How to Configure POP3 to Use TLS or SSL

Microsoft Exchange Server 2007 will reach end of support on April 11, 2017. To stay supported, you will need to upgrade. For more information, see Resources to help you upgrade your Office 2007 servers and clients.

 

Applies to: Exchange Server 2007, Exchange Server 2007 SP1, Exchange Server 2007 SP2, Exchange Server 2007 SP3

This topic explains how to use the Exchange Management Console or the Exchange Management Shell to configure Post Office Protocol version 3 (POP3) to use Transport Layer Security (TLS) or Secure Sockets Layer (SSL). In the original release (RTM) version of Exchange 2007, you could only configure POP3 to use TLS or SSL by using the Exchange Management Shell. In Exchange 2007 Service Pack 1 (SP1), you can also configure POP3 to use TLS or SSL by using the Exchange Management Console. Steps for doing this are included in this topic.

Note

After you have configured POP3 to use TLS or SSL, you must restart the POP3 service. For more information about how to restart the POP3 service, see How to Start and Stop the POP3 Service.

Before You Begin

To perform this procedure, the account you use must be delegated the Exchange Server Administrators role and membership in the local Administrators group for the target server.

For more information about permissions, delegating roles, and the rights that are required to administer Microsoft Exchange Server 2007, see Permission Considerations.

Procedure

Exchange 2007 SP1

To use the Exchange Management Console to configure POP3 to use TLS or SSL

  1. In the console tree, expand Server Configuration, and then click Client Access.

  2. In the work pane, click the POP3 and IMAP4 tab.

  3. In the work pane, select POP3 and then, in the action pane, click Properties.

  4. On the POP3 Properties page, click the Authentication tab.

  5. In the box under X.509 certificate name, enter the name of the certificate.

  6. Click Apply, and then click OK to save your changes.

To use the Exchange Management Shell to configure POP3 to use TLS or SSL

  • Run the following command:

    Set-PopSettings -server Server01 -X509CertificateName CertificateName01
    

For more information about syntax and parameters, see Set-POPSettings.

Exchange 2007 RTM

To use the Exchange Management Shell to configure POP3 to use TLS or SSL

  • Run the following command:

    Set-PopSettings -server Server01 -X509CertificateName CertificateName01
    

For more information about syntax and parameters, see Set-POPSettings (RTM).

For More Information

For more information about how to set up TLS or SSL on a computer that is running Exchange 2007, see Managing Client Access Security.

For more information about how to manage the POP3 protocol, see Managing POP3 and IMAP4.