Certificate is a method to ensure the communication security between client and server. For Exchange Server, SSL is used to help protect the communication between the server and the client. There are three kinds of exchange certificates, one is self-signed certificate, the other is certificate issued by internal CA server, and the third is certificate sold by three parties. At the same time, the certificate needs to be assigned related services to be used normally.

By default, Exchange

Self-signed certificates are installed on client access servers and mailbox servers to encrypt all network communications. Encrypting all network traffic requires each

Exchange servers can use X.509 certificates. You should replace the self-signed certificate on the client access server with a certificate that the client automatically trusts.

"since

Signing means that the certificate is only created and signed by the Exchange server itself. Because the certificate was not created and signed by a generally trusted CA, except for others in the same organization.

No software outside the Exchange server will trust the default self-signed certificate.

Although other exchanges in the exchange organization

The server automatically trusts the certificate, but the client (such as Web browser, Outlook)

Mail clients, such as clients and mobile phones, other than external mail servers will not automatically trust it. Therefore, you can consider using Exchange.

The client accesses a trusted third-party certificate on the server to replace the certificate. If you have your own internal PKI and all clients trust the entity, you can also use your own certificate.

See:/library/dd351044% 28v = exchg.150% 29.aspx? f = 255 & ampmspperror =-2 1472 17396