Self Signed Certificate in Exchange 2010

We can use a self signed certificated for Exchange 2010 ,
Now will learn how to do it.
Something which you need to know is , Using a self signed certificate you need to install the certificates on every machine you use and Mobile devices other wise you will end up in a certificate error in the IE
So that’s why people prefer going for a 3rd party certificate to overcome it.
Will Learn using a Self Signed Certificate , for this to be used Externally you need to have a CNAME record in your public DNS pointing to your Public IP NAT to your CAS
First we will learn how to Export a Certificate request file from Exchange 2010 ,
 
Step 1:


Type a Friendly Name :




Wild Card is used for Very Big Environment .For Example : *.Domain.com


Step 2:
Assign the required Services for your Exchange , Give a Tick Mark


You will opt for it if you are planning for Coexistence in OWA in Exchange 2003 and Exchange 2010


Step 3:
You will see the collection for URL’s



Step 4:
Fill out the Form – And set the location for the Cert Request file




Step 5:
Your request file would look like this



Open it via Notepad , because we need this content to generate a Certificate


Step 6:
You need to have this role installed to have a Certificate Authority , It can be DC or Exchange it self
I have done this in the Exchange itself (No Harm)


Step 7:
Choose : Certification authority , Certification Authority Web Enrollment


Step 8:
Choose Enterprise


Step 9:
Choose Root CA



Step 10:
Create a new Private key


Step 11:
Have this Default with 2048 key Character length


Step 12:
Click Next


Step 13:
By Default Certificate is valid for 5 years , Don’t make any changes on it , Click next


Step 14:



Step 15:
Now if you Open IIS manager , you will see “CertSrv” a Virtual Directory Created ,
Use the right side column “Browse *.443(https)



Step 16:
You would see a page like this , Choose Request a Certificate



Step 17:
Click on Advanced Certificate Request


Step 18:
Choose the Second one
Submit a certificate request by using a base-64-Encoded CMC


Step 19:
Now Copy the Note pad -
Choose Template : WebServer



Step 20:

Choose “Base 64 encoded”


Step 21:
Save the Certificate


Step 22:
Now go to your EMC
Server Configuration – Complete Pending request


Chose the Certificate :



Step 23:
Now Assign Services to the Certificate




Now the Server Part is ready

Step 24:

Now will learn how to install the Certificate in the Client End

Double Click on the Certificate
Click Install Certificate – Click Next –



Choose Personal –



Click Next And Import will be Successful
Now Do the Same Process
Double Click on the Certificate
Click Install Certificate – Click Next – Choose Trusted Root Certification Authorities


Double Click on the Certificate
Click Install Certificate – Click Next – Choose Intermediate Certification Authorities


Step 25:

Before


After installing the Certificate in the Client




Great !!

Now you learn how to use a Self Signed Certificate in Exchange 2010