Previously, we created the CSR in Exchange Management Shell and used it to activate the certificate. After the certificate is issued, you can download the files in your Namecheap account.
The file used for Windows is .p7b. Exchange requires the .cer file, and you can simply rename your .p7b file to .cer as far as they belong to the same certificate format.
The files should be saved on your computer for installation.
To install the certificate, open Exchange Shell and type the following command:
If everything is entered correctly, the system will display the Thumbprint of the certificate and its details (common name, organizational unit, etc.).
In our example, the certificate file was saved on the disc C://, folder “certs”.
In the next step, it is necessary to assign the certificate to the Exchange services. The command is as follows:
The thumbprint used here is the sequence of digits displayed by the system in the previous step. You can also find the thumbprint by decoding your certificate, which can be done in one of two ways:
After you type the command and click Enter, the system will ask if the current installed certificate should be overwritten. This happens if it is the first trusted certificate which will overwrite the default self-signed certificate, or if you have reissued/renewed your certificate. Confirm that the certificate should be overwritten.
The certificate is now installed on the server and assigned to the necessary services. To confirm that it has installed correctly, connect to your server in the browser using the URL of your domain and check the certificate details.