Installing and Configuring an SSL Certificate in Exchange 2016

hello friends in this video demonstration I'm going to show you how to install and configure SS a certificate in exchange 2016 in exchange sub sign certificates are created by default when you install the self-signed certificates are not trusted by the other systems so we need to install certificate manually so in this video we will see the steps to install and configure CSL in exchange 2016 now to you now we have a install and configure exchange 2016 in a last video we just configure the external URL and that is mail dot my Lib calm we will use this URL as a external URL now for water this curve will use Auto disco dot my lab comm and for that we have a configure DNS as well basically we need a certificate that can have a multiple subject alternative name similarly internal and external URL has been already configured and for internal URL we are still using exes in F and M vx01 dot multiplied comm in this demo we'll use our local certificate authority to issue certificate - or exchange you can also purchase certificate from trusted third party certificate now first of all we need to generate a certificate request you know why exchange there are two method you can use for generating a certificate requires for exchange first you can use exchange admin center and the second you can use Exchange Management Shell now we are going to use exchange admin Center to generate a certificate request to do that first of all you have to open action German Center and on exchange admin Center click on servers 1 servers click on certificates and under that you can select your server if you have a multiple server in your organization you can select it from here but right now we have only one server and that is selected by default now click on plus sign to create a new certificate signing request now here we have a two offsets create a request for a certificate from certification authority and second if you are going for a sub sign certificate right now we are going to create a request for a certificate from a certificate authority click on next and here you have to specify the friendly name let's specify the name MS exchange 2016 so this is the name of our certificate click on next now if you are going to use wild-card that time you have to select this box but we are not going to use this thus I am going to just click on next now here chills over to sue the certificate request on the same server is later used to complete the certificate request and will be the first server that has a certificate installed you can later expose a certificate from this server and import it to an exchange server that has the same namespace configured click on browse and select action server in our case it is X 16 - and X 0 1 click on ok and click on next now next we have to select the domain names to include on as a certificate you will notice that the visa has pre-populated the least based on namespace configured on a various exchange server now as you can see for Outlook Web App when access from Internet we have a mail dot male Broadcom for Outlook Web App when accessed from Internet they have a x16 - mb x 0 1 . my lab dot local as the name higher you may also notice if you scroll down that the server's real name is included in the list due to the different configuration of pop and IMAP services even if those services are not enabled you can edit this entry at this step but I find it easier to cross it to the next step and modify the list there instead of right now click on next and these are the name which will be included in our action certificate now we have our my lab dot Luke curl and my lab dot video is there because we earlier configure the accepted do mean ah no exchange server and that's why we have these entry also there click on next and let's first by the organization name once you specify your detail then click on next and here you have the specific path where you are going to store these certificate request UNC path localhost / C dollar / third rack dot rec click on finish and here we go now let's open on seed row where we store our certificate requires and this is the file on which we create in store our certificate request let's open which with not bad and as you can see there is a certain codes and let's copy all this code by selecting ctrl a and let's copy this now click on close to close this not with file so once you copy the content from your a certificate request file now in the next step we have to open local certificate authorities web environment website now let's going back on our internet extruder let access the website by typing the URL UNC path the IP address of our certificate authority in a case it is once when you do one 870 2.20 one slash sorry sorry and hit enter now let's specify the credential of our administrator and let's specify the password and hit enter you can add add and flows click on request or certificate click on advanced certificate request and for this we have to select this submitter certificate request by using base64-encoded CMC now you have to paste the code which we copied earlier from the certificate request file click on paste and from certificate template select a web server click on submit to submit this request now click on download certificate to download this certificate go on sale you can open folder to see the certificate now as you can see under download we have our certificate named cert you and going to copy this certificate and let's put on a Scutaro the name of certificate is cert you now in the next step let's going back on our exchange admin Center and you know next step we have to import the certificate which we download it from our certificate authority now here you can see now our request is pending now select the request and click on complete now you have to specify the path of your certificate in our case the path will be localhost / c dollars less the name of our certificate and that is cert you dot CER click on OK and that's it now if the import is successful the certificate should now appear with the status value now as you can see we have a valid status that means we have successfully imported over certificate - a certificate has been installed for actions over 2016 you need to assign it to the action services before it will be used the task can be performed by using exchange admin center now over here as you can see we have a status is of is valid expert on this now right now this certificate is assigned to these two service and that is IMAP and pop3 now select the certificate click on edit and under services you can see by default it is assigned to IMAP and POP the service now for this demonstration we are going to assign this certificate to iis service as well so select is if you want to assign this certificate to smtp let's select smtp s well now right now we do not have a unified messaging as I am NOT going to select this two box click on save click on yes to overwrite the existing default SMTP certificate click on yes and that's it now after you have completed those steps that says the certificate will be used by exchange for those services you are selected as you can see now right now the assigned services is IMAP pop IAS and SMTP and now let's access the our external URL after assigning SSL certificate all right typing tu s should be s mail dot MyLab dot-com slash over and hit enter ok and this time as you can see we do not have a certificate error now click on this lock symbol and here you can see my lab - CIA has identified this site as trusted and the name is me dot melodica click on view to view the certificate and as you can see our certificate is issued to build or mal calm and the issue by our local certificate authority named my left - C we click on a detail under such a tornado name you can see the DNS name is mail dot my lab comm then X 16 - mb x 0 1 dot my lab dot local these are the multiple subject alternative name available in of a certificate so this is we have you can install and configure SSS certificate in Exchange Server 2016 that's it for this video demonstration thanks for watching this video

Channel: MSFT WebCast

Views: 53,014

Keywords: ssl certificate in exchange 2016, install ssl certificate in exchange 2016, renew ssl certificate in exchange 2016, san certificate in exchange 2016, install san certificate exchange 2016, Configure an Exchange Server 2016 SSL Certificate, exchange 2016 tutorial, exchange 2016 training, exchange 2016, ssl certificate, install ssl certificate, subject alternative name certificate, Create CSR and install SSL certificate on exchange 2016

Id: zZjl-fnU2u8

Length: 9min 8sec (548 seconds)

Published: Fri Aug 26 2016