Exchange Server 2013 Certificate Installation

when we go straight through Web Log on to Exchange , you will notice a certificate error on the page, because Exchange a self-signed certificate is automatically created during installation, but the certificate is not trusted by the domain, so this is the case, so the installation is complete. Exchange , we want to apply for a domain certificate for it, and if you feel the need, you can also buy a public network certificate (this does not seem to be much);

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/54/69/wKioL1SBcWbiO3H7AAFzJG2NExE907.jpg "title=" 1.PNG " alt= "Wkiol1sbcwbio3h7aafzjg2nexe907.jpg"/>

Here's to say, Exchange Server The management tool is ECP ;

through the Https://Exchange name of the server /ECP "(It is recommended to use the server name because you will need to log in with the computer name when testing the certificate is successful, and you cannot use IP , because IP no way to add a certificate) Open Exchange the control Panel;

The first time you log on to ECP , you will be prompted to select "Language" and "Time zone"; select "Save";

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/54/69/wKioL1SBcYaR9b0jAAG_rPlSoiI599.jpg "title=" 2.PNG " alt= "Wkiol1sbcyar9b0jaag_rplsoii599.jpg"/>

Certificate Installation:

1 , Select Servers on the left, then select Certificates, open the Certificates page, and then + "Add a certificate;

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/54/6A/wKiom1SBcQeiF6deAAKZrGiCC_A482.jpg "title=" 3.PNG " alt= "Wkiom1sbcqeif6deaakzrgicc_a482.jpg"/>

2 , the domain certificate that we want to create, all select Create a request to obtain a certificate from a certification authority, and then select Next;

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/54/69/wKioL1SBcc3j-S4YAAF3mMj80Tg458.jpg "title=" 4.PNG " alt= "Wkiol1sbcc3j-s4yaaf3mmj80tg458.jpg"/>

3 , give the certificate a friendly name, and then select "Next";

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/54/6A/wKiom1SBcUvCocIwAAE2hSfgNBw262.jpg "title=" 5.PNG " alt= "Wkiom1sbcuvcociwaae2hsfgnbw262.jpg"/>

4 , whether to enable a wildcard certificate, which is selected according to the actual situation, and then select Next ';

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/54/6A/wKiom1SBcVfRVGpLAAFjO47tiaA427.jpg "title=" 6.PNG " alt= "Wkiom1sbcvfrvgplaafjo47tiaa427.jpg"/>

5 , select "Browse" to select the server;

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/54/6A/wKiom1SBcWKzPjaYAAERXsj4_j4680.jpg "title=" 7.PNG " alt= "Wkiom1sbcwkzpjayaaerxsj4_j4680.jpg"/>

6 , here is a server, all there is no other choice, in the production environment, there may be many servers, then it is necessary to look at that one server to create a certificate request, and then select "OK";

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/54/69/wKioL1SBcf2SBpawAAEFYzoKyOs037.jpg "title=" 8.PNG " alt= "Wkiol1sbcf2sbpawaaefyzokyos037.jpg"/>

7 , and then select Next ;

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/54/6A/wKiom1SBcazjM9fNAAFW_EovfN0738.jpg "title=" 9.PNG " alt= "Wkiom1sbcazjm9fnaafw_eovfn0738.jpg"/>

8 , for the list of user access (mode), where the computer name is recommended, and then select "Next";

Here you can take a look at Microsoft's official best digital certificate actually:

http://technet.microsoft.com/zh-cn/library/dd351044 (v=exchg.150). aspx#digitalcertificatesbestpractices

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/54/6A/wKiom1SBce3g_lUrAAHrXp499M4687.jpg "title=" 11.PNG "alt=" Wkiom1sbce3g_luraahrxp499m4687.jpg "/>

9, add the domain where the certificate contains, you can add our public mail domain name, and then through the following "√" set as the default, and then select "Next";

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/54/6A/wKiom1SBch-itYofAAF4XUtAwog174.jpg "title=" 12.PNG "alt=" Wkiom1sbch-ityofaaf4xutawog174.jpg "/>

Ten , fill in the basic information as required, then enter "Next";

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/54/69/wKioL1SBctHCvst7AAG9YOQXbvM672.jpg "title=" 13.PNG "alt=" Wkiol1sbcthcvst7aag9yoqxbvm672.jpg "/>

One , enter a shared path, (note that the path must be a shared path, and have write access, plus a file name), and then select "Done" ;

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/54/6A/wKiom1SBclrzJ3KvAAGlZdSv7yU984.jpg "title=" 14.PNG "alt=" Wkiom1sbclrzj3kvaaglzdsv7yu984.jpg "/>

A , reopen a browse page, enter the / http of the Certificate Server Ip/certsrv "; then enter the administrator's account password;

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/54/69/wKioL1SBcxmjS4qDAARb0fSSGL8034.jpg "title=" 15.PNG "alt=" Wkiol1sbcxmjs4qdaarb0fssgl8034.jpg "/>

- , select "Application Certificate";

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/54/69/wKioL1SBc2mziNxtAAMwHkKHDp0277.jpg "title=" 16.PNG "alt=" Wkiol1sbc2mzinxtaamwhkkhdp0277.jpg "/>

- , select "Advanced certificate Request";

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/54/69/wKioL1SBc6LSh4dCAAGryXf7GQw100.jpg "title=" 17.PNG "alt=" Wkiol1sbc6lsh4dcaagryxf7gqw100.jpg "/>

the , select the use Base64 Encoding of CMC or PACS #10 file submit a certificate request, use ..... "

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/54/6A/wKiom1SBcyTzrdg8AAJmgzIJKoQ894.jpg "title=" 18.PNG "alt=" Wkiom1sbcytzrdg8aajmgzijkoq894.jpg "/>

- , open the file you just saved in the share, copy the contents, and paste it into the " Base -64 The encoded certificate Request "in the text box;

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/54/69/wKioL1SBc8TSO2dHAAhAEYkT33I570.jpg "title=" 19.PNG "alt=" Wkiol1sbc8tso2dhaahaeykt33i570.jpg "/>

- , Certificate module selection " Web server ", and then select" Submit ";

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/54/6A/wKiom1SBc03wTElTAAMWgYU1-Ag290.jpg "title=" 20.PNG "alt=" Wkiom1sbc03wteltaamwgyu1-ag290.jpg "/>

- , save the certificate of the application; Select Download Certificate

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/54/69/wKioL1SBc-mjtembAAFLnzINq3s364.jpg "title=" 21.PNG "alt=" Wkiol1sbc-mjtembaaflnzinq3s364.jpg "/>

+ , go back to just the certificate page, select the certificate you just created, and then select "Done" on the right;

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/54/6A/wKiom1SBc2nQnOb_AAGUEW1_FRw335.jpg "title=" 22.PNG "alt=" Wkiom1sbc2nqnob_aaguew1_frw335.jpg "/>

- , find the certificate just downloaded; Note: The Save path is also a shared path, enter a file name, and then select OK;

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/54/69/wKioL1SBdArzOsk1AAGB4PN0-KU483.jpg "title=" 23.PNG "alt=" Wkiol1sbdarzosk1aagb4pn0-ku483.jpg "/>

+ , the state of the certificate we are looking at has become valid, so is it over? No.

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/54/69/wKioL1SBdBvjHVQiAAFojjq4WAY971.jpg "title=" 24.PNG "alt=" Wkiol1sbdbvjhvqiaafojjq4way971.jpg "/>

A , select the certificate you just created, and select edit (a pen-like icon);

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/54/69/wKioL1SBdQuhO_14AAFNIBPSoiQ288.jpg "title=" 25.PNG "alt=" Wkiol1sbdquho_14aafnibpsoiq288.jpg "/>

at , Select "Services", then tick the relevant services, then select "Save";

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/54/69/wKioL1SBdRqwz1fEAAFxzxQfmKI491.jpg "title=" 26.PNG "alt=" Wkiol1sbdrqwz1feaafxzxqfmki491.jpg "/>

- , this model UM services do not check, or will error, it is unified communications, the environment is not;

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/54/6A/wKiom1SBdJeS41tDAAC3YTv9b1E594.jpg "title=" 27.PNG "alt=" Wkiom1sbdjes41tdaac3ytv9b1e594.jpg "/>

- , at the time of saving, will be prompted whether to overwrite the current SMTP certificate, select "Yes";

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/54/69/wKioL1SBdTeRhpAOAACxz2RY6Lg438.jpg "title=" 28.PNG "alt=" Wkiol1sbdterhpaoaacxz2ry6lg438.jpg "/>

- , now in the login, there is no certificate error;

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/54/6A/wKiom1SBdLOzt0fxAAFe3y70E5g058.jpg "title=" 29.PNG "alt=" Wkiom1sbdlozt0fxaafe3y70e5g058.jpg "/>

This article is from the "Snow Orchid" blog, please be sure to keep this source http://yupeizhi.blog.51cto.com/3157367/1586716

Exchange Server 2013 Certificate Installation