How to Install SSL Certificate for Exchange Server 2019

We can reuse the existing SSL certificate for the new Exchange 2019 server.

1. Login to the Exchange 2016 Server.

2. Open Exchange Management Shell as an administrator.

3. Run the below cmdlet to check the Thumbprint of the certificate.

Get-ExchangeCertificate | Select CertificateDomains, Thumbprint

4. Run the below cmdlet to export the certificate.

$bincert = Export-ExchangeCertificate -Thumbprint <Thumbprint> -BinaryEncoded -Password (Get-Credential).password

5. Enter a username and password on the Windows PowerShell credential request page.

6. Click OK.

7.
Run the below cmdlet to save the certificate file.

[System.IO.File]::WriteAllBytes(‘<path>\<file name>.pfx’, $bincert.FileData)

8. Copy the certificate file from the Exchange 2016 server to the Exchange 2019 server.


9. Login to the Exchange 2019 server.

10. Open the Exchange Management Shell as administrator.

11. Run the below cmdlet to import a certificate.

Import-ExchangeCertificate -Server EX01-2019 -FileData ([System.IO.File]::ReadAllBytes(‘C:\Post-Install\certificate\wildcard_gooddealmart_ca.pfx’)) -Password (Get-Credential).password

12. Enter a username and password on the Windows PowerShell credential request page.

13. Click OK.

14. It would be best to save the Thumbprint for assigning exchange services to this certificate.

15. Run the below cmdlet to enable exchange services with this certificate.

Enable-ExchangeCertificate -Thumbprint <Thumbprint> -Services <Service name>,<Service name>… [-Server < Exchange Server Name >]

16. Run the below cmdlet to verify that you have successfully assigned a certificate to the Exchange services.

Get-ExchangeCertificate | Format-List FriendlyName,Subject,CertificateDomains,Thumbprint,Services

I hope you enjoy this post.

Cary Sun

X: @SifuSun

Web Site: carysun.com

Blog Site: checkyourlogs.net

Blog Site: gooddealmart.com

About Post Author

Leave a Reply