Assign Services to a Certificate

Applies to: Exchange Server 2010

You can assign specific services to your Secure Sockets Layer (SSL) certificate. The services you can assign include POP, IMAP, IIS, and SMTP.

Prerequisites

The Client Access server role has been installed and at least one certificate is installed on your Client Access server.

What Do You Want to Do?

  • Use the EMC to assign services to a certificate
  • Use the Shell to assign services to a certificate

Use the EMC to assign services to a certificate

You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Client Access server security settings" entry in the Client Access Permissions topic.

  1. In the console tree, select Server Configuration.
  2. In the action pane, click New Exchange Certificate to open the New Exchange Certificate wizard.
    • This wizard helps you determine what type of certificates you need for your Exchange organization.
  3. On the Assign Services Introduction page, use the check boxes to choose the services you want to assign to your certificate.
  4. On the Exchange Server selection page, choose the Exchange server that your certificate resides on.
  5. On the Completion page, verify that all the information you have provided is correct.
  6. On the Confirmation page, follow the steps listed to complete your request. This page also displays the Shell cmdlet syntax necessary to create a new certificate.

Use the Shell to assign services to a certificate

You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Client Access server security settings" entry in the Client Access Permissions topic.

This example assigns the IMAP, POP, IIS, and SMTP services to the certificate.

Enable-ExchangeCertificate -Server 'EXCH-H-868' -Services 'IMAP, POP, IIS, SMTP' -Thumbprint 'EDF57B5F9D81F1EC329BFB77ADD4465B426A40FB'