How to install SSL cert for SMTP Server

Question

_{Thursday, December 5, 2013 10:54 PM}

I have just installed SMTP feature on 2008 R2 server. I need to install a SSL cert but cannot find the procedure to do so. Can someone tell me what the procedure is.

Thanks in advance for your help.

Thanks for your help

All replies (6)

_{Tuesday, December 10, 2013 2:34 AM ✅Answered}

Hi,

You can refer the following similar thread:

Using TLS certificate with Windows 2008 SMTP virtual server

http://social.technet.microsoft.com/Forums/windowsserver/en-US/85e7af7b-ac3d-44ad-8d85-16bbc3686bd1/using-tls-certificate-with-windows-2008-smtp-virtual-server?forum=winservergen

We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

_{Monday, December 9, 2013 8:12 AM}

Hi,

The SMTP server in Server 2008r2 must managed by the IIS6 manage component, the following article will show the step by step to install the SSL SMTP server.

 Appendix D: Create the SMTP Server

http://msdn.microsoft.com/en-us/library/dn292550(v=bts.80).aspx

The similar third party article:

Setup and Configure SMTP Server on Windows Server 2008 R2

http://www.vsysad.com/2012/04/setup-and-configure-smtp-server-on-windows-server-2008-r2/

Hope this helps.

We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

_{Monday, December 9, 2013 2:02 PM}

Thanks for your response. These articles do not explain how to install and configure the SSL cert for the SMTP server. Do you know how to install and configure the SSL cert for this?

Thanks for your help

_{Wednesday, December 11, 2013 7:46 AM}

Try these links, too. NOte: Windows 2008 and 2008 R2 (IIS 7.0 and 7.5) are the same steps.

how to install ssl certificate in windows 2008 server?
http://answers.microsoft.com/en-us/windows/forum/windows_other-security/how-to-install-ssl-certificate-in-windows-2008/6fd624e2-69bb-4c55-b7ba-f02c22003209

Installing an SSL Certificate in Windows Server 2008 (IIS 7.0)
http://www.sslshopper.com/article-installing-an-ssl-certificate-in-windows-server-2008-iis-7.0.html

Ace Fekay
MVP, MCT, MCITP/EA, MCTS Windows 2008/R2 & Exchange 2007, Exchange 2010 EA, MCSE & MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services
Technical Blogs & Videos: http://www.delawarecountycomputerconsulting.com/

This post is provided AS-IS with no warranties or guarantees and confers no rights.

_{Wednesday, December 11, 2013 6:19 PM}

Thanks Alex this has proven to be the answer for 2008 server:

1. Open IIS7 and create a self signed cert, even though the smtp server is installed under IIS6.  Under connections click on the server name -> Server Certificates -> Create Self signed cert or purchase cert with Full-qualified domain name as subject. Be advised if you use a self signed cert it is only good for one year, but will work fine for testing purposes.

2. Make sure that the Fully-quilified domain name configured under the SMTP Virtial Server properties matches the certificates subject name. Delivery -> Advanced -> Fully-qualified domain name

3. Configure the SMTP Virtial Server FQDN goto: SMTP Virtual Server Properties > Delivery TAB > Advanced BUTTON > and type the FQDN in the "Fully-quilified domain name" textbox  (Again this must match exactly the subject on the cert) Apply and close properties box.

4. Restart the service Simple Mail Transfer Protocol SMTP

5. Confirm that the certificate was found by the SMTP service: Open the SMTP Vitual Server properties > Access TAB > and the Secure communications SECTION should read "A TLS cerificate is found with expiration date: day/month/year". Compare the shown date with the actual certificate expiration date.

Thanks for your help

_{Wednesday, July 22, 2015 4:34 PM}

This explains how to install SSL to IIS, not SMTP.

Is your field ready?