Installing and Configuring an SSL Certificate in Exchange 2016

In this video tutorial we will learn how to install and configure ssl certificate in exchange 2016. For this demonstration i will be using my local enterprise root certificate authority to get ssl certificate with subject alternative name for our Exchange 2016.
1) Create a certificate request
2) Get certificate from Certificate Authority
3) Import certificate on Exchange 2016
4) Assign certificate to exchange services

[@jreach4487]

This is the first video that I actually had to reduce the speed.

[@Neelkantn]

Very good video - nice explanation and demonstration.

[@mohammedkhizar8858]

nicely explained...great work..thanks a lot..

[@timgoretzki7736]

U have to speak slower, please no "double-time" but very good

[@andyskuse1592]

Hi, thank-you for such a great detailed video. You helped clear up several issues I was having with this process. But I have a question. At around 8:42 in the video you show the Subject Alternative Names for the certificate, and there are a few .local address. I thought we could not add any internal domain addresses to certificates with Exchange 2016? The reason I am asking is that several users are seeing a certificate error ("server name does not match name on certificate") when trying to connect to my Exchange 2016 server. I have purchased and installed a new certificate from GoDaddy as you outlined above, but some users are still seeing the certificate error. How can I troubleshoot this issue?

[@preston3698]

did you ever figure this out bc am getting the same error

[@microworldtech]

Why local CA certificate not trusted in Edge and chrome?

[@jdshah2011]

Nice video. Do i have to submit certificate request to all the DNS i have on the network?

[@cyberpunk72000]

I have an Exchange 2016 ssl cert from Godaddy that is expiring in a couple of weeks. I have renewed it with Godaddy. I am not sure how to go through the renewal process on the server though. I select the expiring cert, click Renew in the right pane, it creates a CSR as a result of that wizard, and I am not sure what to do with this CSR. I don't think I need to re-key, but I see nothing else to do with this CSR. Any advice?

[@cristhiansaid]

Do i need a ssl san multiple names? for a OC public?

[@El_spider777]

you are a CRack!!!! thanks , me sirvió mucho !!!!

[@MSFTWebCast]

Thank You.

[@povnit6813]

could you tell me how do login ip address can be get certificates

[@suhasnaikwadi5094]

How to crate wildcard certificate

[@MSFTWebCast]

Check out Active Directory Certificate Services series playlist.

[@perfect.stealth]

I followed the procedure, and i did create the certificate and assign it to the services. When i try to access my OWA, i get the invalid SSL certificate warning from the browser.

[@MSFTWebCast]

Access owa with the fqdn which you have provided in certificate. Or maybe the CA certificate is still not added into trusted root certification authorities list.

[@arjunmadhusudhanan9339]

Thank you so much!

[@jeremy8715]

Do I need to add the AD CS role for all this to work? I'm doing Exchange 2013 sp1 on 2012R2 server.

[@MSFTWebCast]

Yes, For this test lab i have setup local certification authority but you can also use third party certificate as well. (Note: You need to purchase that certificate).

[@perfect.stealth]

Sir.. you are talking way to fast. Thank you for the video though, but i had to rewind multiple times to understand what you said.

[@MSFTWebCast]

Yeah.. This is old me.. Soon there will be new series on Exchange 2019 with normal speed.

[@alirezaghulamsakhi6097]

wow this so good

[@rrrussell1009]

I am sure I have done something wrong. I type in 192.168.40.xxx/certsrv and get error saying cannot contact.

[@MSFTWebCast]

Are you trying with http or https?

[@rrrussell1009]

@@MSFTWebCast I fixed it. I forgot to install the web enrollment.

[@AI.Almesbahi]

it shows me invalid

[@JasperHampton]

Thank you :)

[@Determinor]

I played in 0.75 speed and could follow your talking then.

[@MSFTWebCast]

Thank You. Now I am little slower than starting days.

[@vinojan32]

Bro you must speak a little bit slower

[@iHitchiti]

Pro tip: turn on subtitles and lower speed to 0.5. Great video otherwise

[@MSFTWebCast]

Thank You...I am working on it..(Speed)

[@rottenfist220]

Take less caffeine bro

[@MSFTWebCast]

You got me. I am insomniac and having anxiety.

[@rottenfist220]

@@MSFTWebCast meditation & gym helps.

[@MSFTWebCast]

Yep, Meditation sounds good.

[@jebroertjeniet4866]

dude please talk slower in your new videos..

[@richardguevara5533]

I thought spiderman is speaking lol

[@MSFTWebCast]

May be in different multiverse...by the way I love to have super power so i can change my accent...

[@perfect.stealth]

@@MSFTWebCast Your accent is fine.

[@aliamanoezdemir]

Thanks, but u speak too fast .. And your English is very exhausting

[@jasonme3557]

stop talking

[@rrorge]

Hey how do you change the length of the certificate requested, mine seems to be for 1 year only even though I have purchased 3 years