Step by Step guide for requesting and Installing Certificate from internal CA on Exchange 2016

Open Exchange Admin Center
Click on Server >> Certificate


Click on + Plus icon , it will open a Certificate Wizard, Select Create a request for a certificate from a certificate authority.


If are request a SAN certificate leave this options blank.
As I am requesting a wildcard certificate I will check the box for now.

When reqesting a wildcard certificate we need to provide the root domain.

Click on browse and select the server where you wish to store the certificate request.


 Provide the organization information.


Click Next and provice a UNC path to store the Certificate request

Once the requested is completed you see the .Req file in the location.

Now open the ADCS link to request certificate. Same request can also be submitted to third party CA.
Select Advanced Certificate Request here.
 
Then Click on the 2nd link
certspc.gifSubmit a certificate request by using a base-64-encoded CMC or PKCS #10 file, or submit a renewal request by using a base-64-encoded PKCS #7 file.

Now open the crq file and copy the request.


 And paste the same here.


And submit.
Certificate authority will process the request and will issue a certificate.


Download the Certificate.


Now when we have certificate we are ready to complete the request.
Lets go back to EAC and click on Complete to continue.



A new window will pop up provide the certificate path and click on OK and the certificate will be installed.


Once the cert is install you will be able to select the Services you wish to apply this certificate too.


And that’s it.

Comments