The installation process of Exchange Server 2007 ( Screencast: How to Install Exchange 2007 SP1 on Windows Server 2008) generates and installs a temporary Self Signed Certificate which allows you to start and use Exchange Server 2007 immediately. This certificate is provided as a temporary solution and Microsoft recommends that it is replaced with a Commercial Certificate. Using a SelfSigned certificate poses a security risk to your users. Also, you cannot use ActiveSync and Outlook Anywhere with this certificate. In addition, the remote users get a Pop-Up window, warning them about the certificate when opening Outlook Web Access.

Ideally, you should be purchasing and installing a Multiple Domain (UCC) SSL certificate and we are demonstrating Step-by-Step the whole process in this Screencast.

We will show you how to generate a Certificate Signing Request for a GoDaddy Multiple Domain (UCC) SSL Certificate, and how to submit the CSR. Next, we will download and install GoDaddy Intermediate Certificates bundle and the UCC certificate. Finally, we will enable and test the new certificate from local and remote clients.

If you have already purchased or have a Single Name SSL certificate, you could check our Screencast – How to Install a Single Name GoDaddy SSL Certificate in Exchange Server 2007

You should be aware though, that using a Single Name Certificate requires extra configuration steps and might impose additional administrative overhead when configuring Outlook Anywhere.

To keep things simple, we will dedicate separate Screencasts for the different RPC over HTTPS/ Outlook Anywhere configuration (Server side and Client side) scenarios.

In the following Screencast, we will demonstrate the installation and configuration of a GoDaddy Multiple Domain (UCC) SSL Certificate in Exchange Server 2007.

In our demo, we are using a Single Exchange Server 2007 scenario. You can download the text file with Exchange Management Shell commands, here.

Step 1 In this step, we take a look at the Self Signed certificate generated by the Exchange 2007 installation which is about to be replaced. Then, we generate a CSR (Certificate Signing Request), activate the Certificate credit at GoDaddy.com, and finally, submit the CSR.

Step 2 Next, we demonstrate how to download and extract the ZIP file with GoDaddy Intermediate Certificates and our Single Name SSL certificate. We proceed with importing GoDaddy Intermediate Certificates, and then our SSL certificate in the computer Certificates Store. It is important to follow the same order – first import the Intermediate certificates, then – the Exchange certificate. Finally, we check that our Certificate is successfully placed in the Certificates Store, and confirm its Validity, Issues, Common Name, and Certification Path.

Step 3 We haven’t enabled yet the new SSL certificate for the available Exchange Services. Before we proceed with this task, we adjust the Exchange Web Services URL. Once we confirm the result, we proceed enabling the SSL certificate for IMAP, POP, IIS and SMTP services in Exchange Management Shell, and perform some final adjustments in Exchange Management Console.

Step 4 In the last step, we test the new certificate from clients on the local network and at a remote location.