Exchange 2013sp1 email system deployment-(7)

10. Exchange Certificate Application

10.1. Apply for an exchange server ca

10.1.1. Select excas1 and click "+" to create a certificate.

650) This. width = 650; "Title =" clip_image002 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; "Border =" 0 "alt =" clip_image002 "src =" http://img1.51cto.com/attachment/201409/1/7269200_1409541255LJgv.jpg "Height =" 114 "/>

10.1.2. On the new certificate overview page that appears, select create obtain certificate from Certificate Authority.

650) This. width = 650; "Title =" clip_image004 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; "Border =" 0 "alt =" clip_image004 "src =" http://img1.51cto.com/attachment/201409/1/7269200_1409541256hP2j.jpg "Height =" 167 "/>

10.1.3. Enter a certificate-friendly name in the certificate-friendly name. Enter exchange ca here.

650) This. width = 650; "Title =" clip_image006 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; "Border =" 0 "alt =" clip_image006 "src =" http://img1.51cto.com/attachment/201409/1/7269200_1409541256LzHb.jpg "Height =" 166 "/>

10.1.4. Go to the following page and click Next.

650) This. width = 650; "Title =" clip_image008 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; "Border =" 0 "alt =" clip_image008 "src =" http://img1.51cto.com/attachment/201409/1/7269200_1409541256DIlN.jpg "Height =" 167 "/>

10.1.5. Select the server where the certificate is stored. Select excas1 and click Next.

650) This. width = 650; "Title =" clip_image010 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; "Border =" 0 "alt =" clip_image010 "src =" http://img1.51cto.com/attachment/201409/1/7269200_1409541257kPxu.jpg "Height =" 161 "/>

10.1.6. In the domain included in the specified certificate, select outlook anywhere to edit

650) This. width = 650; "Title =" clip_image012 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; "Border =" 0 "alt =" clip_image012 "src =" http://img1.51cto.com/attachment/201409/1/7269200_1409541257sy1q.jpg "Height =" 164 "/>

10.1.7. in the edit box, enter mail.contoso.com and click OK to return to the certificate domain page.

650) This. width = 650; "Title =" clip_image014 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; "Border =" 0 "alt =" clip_image014 "src =" http://img1.51cto.com/attachment/201409/1/7269200_1409541258yAf7.jpg "Height =" 138 "/>

650) This. width = 650; "Title =" clip_image016 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; "Border =" 0 "alt =" clip_image016 "src =" http://img1.51cto.com/attachment/201409/1/7269200_1409541258G6Cb.jpg "Height =" 156 "/>

10.1.8. Go to the certificate domain list page and add the relevant domain to the certificate.

650) This. width = 650; "Title =" clip_image018 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; "Border =" 0 "alt =" clip_image018 "src =" http://img1.51cto.com/attachment/201409/1/7269200_1409541259oPIf.jpg "Height =" 163 "/>

10.1.9. Enter the required information in the Certificate Authority.

650) This. width = 650; "Title =" clip_image020 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; "Border =" 0 "alt =" clip_image020 "src =" http://img1.51cto.com/attachment/201409/1/7269200_1409541259HHk5.jpg "Height =" 166 "/>

10.1.10. Enter the certificate request storage path and click Finish.

650) This. width = 650; "Title =" clip_image022 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; "Border =" 0 "alt =" clip_image022 "src =" http://img1.51cto.com/attachment/201409/1/7269200_1409541259ZzPl.jpg "Height =" 167 "/>

10.1.11. Access the Certificate Server in IE browser. Here is http: // pdc2012/certsrv. Select "apply for certificate ".

650) This. width = 650; "Title =" clip_image024 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; "Border =" 0 "alt =" clip_image024 "src =" http://img1.51cto.com/attachment/201409/1/7269200_1409541260xJVa.jpg "Height =" 133 "/>

10.1.12. Go to the following page and select "Advanced Certificate Application ".

650) This. width = 650; "Title =" clip_image026 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; "Border =" 0 "alt =" clip_image026 "src =" http://img1.51cto.com/attachment/201409/1/7269200_1409541260XKxe.jpg "Height =" 95 "/>

10.1.13. On the Certificate Application page, select "submit a certificate application using base64-encoded CMC or PKCS #10 file, or use base64-encoded PKCS #7 file to renew the certificate application ".

650) This. width = 650; "Title =" clip_image028 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; "Border =" 0 "alt =" clip_image028 "src =" http://img1.51cto.com/attachment/201409/1/7269200_1409541261hIF8.jpg "Height =" 102 "/>

10.1.14. Copy the content of the req text, paste the content to the "Save application" window, and select the certificate template as "Web server ".

650) This. width = 650; "Title =" clip_image030 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; "Border =" 0 "alt =" clip_image030 "src =" http://img1.51cto.com/attachment/201409/1/7269200_1409541261tD7k.jpg "Height =" 177 "/>

10.1.15. Download the issued certificate and save it as exchange ca.

650) This. width = 650; "Title =" clip_image032 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; "Border =" 0 "alt =" clip_image032 "src =" http://img1.51cto.com/attachment/201409/1/7269200_1409541262iumI.jpg "Height =" 100 "/>

10.1.16. Open the exchange certificate request page, select exchange Ca, and click "finish" on the right to complete the hold request.

650) This. width = 650; "Title =" clip_image034 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; "Border =" 0 "alt =" clip_image034 "src =" http://img1.51cto.com/attachment/201409/1/7269200_1409541262zf5d.jpg "Height =" 131 "/>

10.1.17. Enter the storage path of the certificate exchangeca. Cer file issued by the certificate authority to import the certificate to the Exchange Server. Click OK to complete the certificate application.

650) This. width = 650; "Title =" clip_image036 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; "Border =" 0 "alt =" clip_image036 "src =" http://img1.51cto.com/attachment/201409/1/7269200_1409541263dyph.jpg "Height =" 200 "/>

10.2. allocate services to certificates

10.2.1. Select the exchange CA certificate and edit it.

650) This. width = 650; "Title =" clip_image038 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; "Border =" 0 "alt =" clip_image038 "src =" http://img1.51cto.com/attachment/201409/1/7269200_1409541263uL24.jpg "Height =" 86 "/>

10.2.2. On the Edit page, select "service" and select the certificate that the appropriate service is assigned to the Exchange Server ..

650) This. width = 650; "Title =" clip_image040 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; "Border =" 0 "alt =" clip_image040 "src =" http://img1.51cto.com/attachment/201409/1/7269200_1409541263DODd.jpg "Height =" 197 "/>

10.2.3. In the pop-up warning, select "yes"

650) This. width = 650; "Title =" clip_image041 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; "Border =" 0 "alt =" clip_image041 "src =" http://img1.51cto.com/attachment/201409/1/7269200_1409541264VrHe.png "Height =" 155 "/>

10.2.4. The service is successfully assigned to the certificate wizard.

650) This. width = 650; "Title =" clip_image043 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; "Border =" 0 "alt =" clip_image043 "src =" http://img1.51cto.com/attachment/201409/1/7269200_1409541264xXBI.jpg "Height =" 127 "/>

10.2.5. You also need to import the certificate to excas2 and export the certificate from excas1 first.

650) This. width = 650; "Title =" clip_image045 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; "Border =" 0 "alt =" clip_image045 "src =" http://img1.51cto.com/attachment/201409/1/7269200_1409541265DT5h.jpg "Height =" 131 "/>

10.2.6. Save the certificate as a pfx file, enter the password, and click OK.

650) This. width = 650; "Title =" clip_image047 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; "Border =" 0 "alt =" clip_image047 "src =" http://img1.51cto.com/attachment/201409/1/7269200_1409541265HIvE.jpg "Height =" 166 "/>

10.2.7. Select excas2 and import the exchange certificate

650) This. width = 650; "Title =" clip_image049 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; "Border =" 0 "alt =" clip_image049 "src =" http://img1.51cto.com/attachment/201409/1/7269200_1409541266VFHj.jpg "Height =" 96 "/>

10.2.8. On the import certificate page, enter the path and password of the pfx file you just saved and click Next.

650) This. width = 650; "Title =" clip_image051 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; "Border =" 0 "alt =" clip_image051 "src =" http://img1.51cto.com/attachment/201409/1/7269200_1409541266KTqb.jpg "Height =" 167 "/>

10.2.9. Select the server to which the certificate is imported. Here, there is a client access server that does not have a certificate, both excas2. Select excas2. return to the page and click Finish.

650) This. width = 650; "Title =" clip_image053 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; "Border =" 0 "alt =" clip_image053 "src =" http://img1.51cto.com/attachment/201409/1/7269200_14095412668qRm.jpg "Height =" 201 "/>

650) This. width = 650; "Title =" clip_image055 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; "Border =" 0 "alt =" clip_image055 "src =" http://img1.51cto.com/attachment/201409/1/7269200_1409541267IZKb.jpg "Height =" 152 "/>

10.2.10. At this time, the certificate has been imported to excas2, but the certificate is invalid. We need to install the certificate on the excas2 server.

650) This. width = 650; "Title =" clip_image057 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; "Border =" 0 "alt =" clip_image057 "src =" http://img1.51cto.com/attachment/201409/1/7269200_1409541267ECjC.jpg "Height =" 114 "/>

10.2.11. Install the exchange CA certificate and click the certificate to install it.

650) This. width = 650; "Title =" clip_image059 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; "Border =" 0 "alt =" clip_image059 "src =" http://img1.51cto.com/attachment/201409/1/7269200_1409541268jaQY.jpg "Height =" 78 "/>

10.2.12.

650) This. width = 650; "Title =" clip_image061 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; "Border =" 0 "alt =" clip_image061 "src =" http://img1.51cto.com/attachment/201409/1/7269200_1409541268pE5R.jpg "Height =" 226 "/>

10.2.13. Store the certificate in the Trusted Root Certificate Authority ".

650) This. width = 650; "Title =" clip_image063 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; "Border =" 0 "alt =" clip_image063 "src =" http://img1.51cto.com/attachment/201409/1/7269200_1409541268abfX.jpg "Height =" 224 "/>

10.2.14. Return to the exchange certificate page. The certificate is in the "valid" status.

650) This. width = 650; "Title =" clip_image065 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; "Border =" 0 "alt =" clip_image065 "src =" http://img1.51cto.com/attachment/201409/1/7269200_1409541272RwaN.jpg "Height =" 132 "/>

10.2.15. Like excas1, select the appropriate service and assign it to the certificate.

650) This. width = 650; "Title =" clip_image067 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; "Border =" 0 "alt =" clip_image067 "src =" http://img1.51cto.com/attachment/201409/1/7269200_1409541272kRSu.jpg "Height =" 194 "/>

10.2.16. Enter https://mail.contoso.com/owain IE to test the certificate.

650) This. width = 650; "Title =" clip_image069 "style =" border-top: 0px; border-Right: 0px; border-bottom: 0px; border-left: 0px; "Border =" 0 "alt =" clip_image069 "src =" http://img1.51cto.com/attachment/201409/1/7269200_1409541273TPkq.jpg "Height =" 123 "/>

Exchange 2013sp1 email system deployment-(7)