exchange 2007: ssl certificates
run the following on CAS servers to view current cert info (exchange management shell):
Get-ExchangeCertificate -DomainName mail.mydomain.com
to import and enable a certificate all in one step run:
Import-ExchangeCertificate -Path C:\mail_mydomain_com.cer | Enable-ExchangeCertificate -Services “IMAP, POP, IIS”
if the certificate has already been imported via the digicert utility or through the certificates snap-in then just run:
Enable-ExchangeCertificate -ThumbPrint <thumbprint> -Services “IMAP, POP, IIS”
note: if you receive an error regarding private key missing you’ll need to generate a new CSR and get a new certificate
more info on this here:
http://www.digicert.com/ssl-support/exchange-private-key-missing.htm
digicert exchange 2007 CSR tool (useful for first time cert generation):
https://www.digicert.com/easy-csr/exchange2007.htm
digicert certificate utility (very useful for cert renewals and grabbing cert thumbprints):
https://www.digicert.com/util
info on installing certs here:
http://www.digicert.com/ssl-certificate-installation-microsoft-unified-communications.htm