Export (0) Print
Expand All
This topic has not yet been rated - Rate this topic

Export an SSL Certificate

Applies to: Exchange Server 2010

Topic Last Modified: 2009-11-16

You can use the Shell to export a Secure Sockets Layer (SSL) certificate. An SSL certificate is installed on a Microsoft Exchange Server 2010 Client Access server. The SSL certificate enables the Client Access server to encrypt communications with clients by using SSL technology. The SSL certificate installed on the Client Access server can be the default self-signed certificate, a certificate from a Windows public key infrastructure (PKI) certification authority (CA), or a certificate from a trusted commercial third-party CA.

You can export an existing certificate or a certificate request. To install a copy of the SSL certificate on a client computer or a mobile phone, the certificate must be exported by using the Export-ExchangeCertificate cmdlet.

Bb310778.important(en-us,EXCHG.140).gifImportant:
Previous versions of Microsoft Exchange let you use Internet Information Services (IIS) to save a copy of the certificate. Although IIS will still let you save a copy of the certificate in Exchange 2010, we don't recommend that you do this. Use the Export-ExchangeCertificate cmdlet to generate a copy of the certificate for importing to another server, client computer, or mobile phone.

After you've exported the SSL certificate in the form of a PKCS #12 file, the file can then be imported by the following:

  • Another Exchange 2010 server, by using the Import-ExchangeCertificate cmdlet
  • A client computer, by using the Certificate Import wizard in the EMC
  • A mobile phone, by using desktop ActiveSync
    Bb310778.note(en-us,EXCHG.140).gifNote:
    Not all mobile phones support installation of SSL certificates. For more information, see your mobile phone documentation.

Looking for other management tasks related to SSL? Check out Managing SSL for a Client Access Server.

The following command uses the Export-ExchangeCertificate cmdlet to export certificate data to the variable $file.

$file = Export-ExchangeCertificate -Thumbprint 5113ae0233a72fccb75b1d0198628675333d010e -BinaryEncoded:$true -Password (Get-Credential).password

For more information about syntax and parameters, see Export-ExchangeCertificate.

Did you find this helpful?
(1500 characters remaining)
Thank you for your feedback
Show:
© 2014 Microsoft. All rights reserved.