Use the IMail SSL Configuration Utility (Beta) to create a certificate and have it signed. Install the signed cert in IMail. Then use the IMail SSL Configuration Utility (Beta) to convert to use with IIS and install in to windows. Here are the steps:
We would like to thank our Customer Adam Schwartz for putting this together for us.
- Open IMail SSL Configuration Utility (Beta) and select the Create New Certificate tab. Fill out the information on the form. Since you are going to get a signed certificate, be sure to select the Certificate Request Option. Once completed, select create. This will create a *.csr file (certificate request) and a *.key file (private key).
- Submit the *.csr file to your Certificate Authority. Once this is processed, request the certificate. For server type select Apache (if not listed select other). You should receive 2 crt files back – The Signed Certificate and the Intermediate and/or Root Certificate.
- Open IMail SSL Configuration Utility (Beta) again and select the Combine Intermediate tab. Enter the Signed Certificate file and then the Intermediate and/or Root Certificate. Next select Combine Certificates. This will generate a combined certificate (file format *-combine.crt).
- From the IMail SSL Configuration Utility (Beta) select the Certificate Selection tab. Enter the private key (created in step one) followed by the combined certificate. Next enter the pass phrase used when creating the certificate request and select apply. The Signed SSL Certificate should now be available for IMail services. The next step is to convert the certificate to an IIS Certificate.
- Go back to your Certificate Authority and request the certificate but this time select IIS as the server type. You should get back a *.crt file and a *.p7b file. The *.crt file should not be needed.
- From the IMail SSL Configuration Utility (Beta) select the Convert IMail Cert for IIS tab. Select a name for the Output Cert Name. Next enter the *.key file you got in step one along with the *-combine.crt file from step 3. Next enter the pass phrase when creating the certificate request and select convert. This will create a *.pfx file.
- Next install the .p7b certificate using the Microsoft Management Console (MMC) Snap-In. See IIS documentation on how to do this (may vary depending on your version of IIS).
- Once the intermediate certificate has been installed, go back to the MMC Snap-In. From inside the Certificate Snap-in section Right-Click on folder labeled Certificates under the Personal folder and select All Tasks-> Import. When the Certificate Import Wizard starts click Next. Browse or type in a location for the PFX file. Select next and then enter the pass phrase. Then choose to Automatically select the certificate store based on the type of certificate and click Next. Then click finish to complete the Certificate Import Wizard. The certificate has now been added to windows.
- To Install the new SSL Certificate in Microsoft IIS, please see the IIS documentation as this varies by IIS Version. You will want to bind the new certificate to the IIS IMail Webmail website.