To install an Exchange 2016 SSL certificate the process is:
- Generate a certificate signing request (CSR)
- Submit the CSR to a certificate authority, such as Digicert, and download the issued certificate
- Complete the pending SSL certificate request in Exchange
- Assign the certificate to Exchange services
In this tutorial we'll look at step 3, completing the pending SSL certificate request.
The certificate has already been downloaded and placed in a location that is accessible by the Exchange server's computer account, or by the Exchange Trusted Subsystem group. You will need to provide the UNC path to the file when completing the pending certificate request. I've placed my certificate in the C:Admin folder of my Exchange server.
In the Exchange Admin Center navigate to servers, then certificates. Choose the Exchange server you need to complete the pending certificate request for, and selecting the pending request. Click the Complete link on the right side of the page.
Enter the UNC path to the certificate file and click OK.
If the import is successful the certificate should now appear with a status of “Valid”.
The next step is to assign or enable the certificate for Exchange services.