Exchange: PFX Certificate Import

Import an SSL certificate from a PFX file into Exchange Server – for example, when migrating a certificate from another server or restoring from a backup.

Import via PowerShell (all versions)

The PowerShell method works on Exchange 2007, 2010, 2013, 2016 and 2019.

1. Open the Exchange Management Shell as an administrator.
2. Run the following command:

Import-ExchangeCertificate -FileData ([System.IO.File]::ReadAllBytes("C:\certifikat.pfx")) -Password (Get-Credential).password

3. At the prompt: enter None as the username (this is ignored) and then provide the PFX file password.
4. Verify the import:

Get-ExchangeCertificate | fl

Import via Exchange Admin Center (2013/2016/2019)

From Exchange 2013 onwards, you can also import certificates via the web interface:

1. Open the Exchange Admin Center (EAC).
2. Log in with administrator credentials.
3. Select servers in the left menu → choose the server → click certificates at the top right.
4. Click the three dots (...) → click Import Exchange certificate.
5. Specify the UNC path to the PFX file (e.g. \\server\share\certifikat.pfx).
6. Enter the PFX file password.
7. Click OK.

Assign certificate to services

After the import is complete, the certificate must be enabled for the relevant Exchange services:

Enable-ExchangeCertificate -Thumbprint <Thumbprint> -Services IIS,SMTP,POP,IMAP

Confirm with Y when prompted to overwrite the existing certificate for these services.

Troubleshooting

• "The password is not correct": PFX passwords are case-sensitive.
• Certificate is visible but services are not working: Ensure the certificate has been activated using Enable-ExchangeCertificate after the import.
• IIS is still serving the old certificate: Restart IIS by running iisreset after activation.