1.From the Start menu, click Run..
2.Type mmc, and then click OK. The Microsoft Management Console (Console) window opens.
3.In the Console window, click the File menu and select Add/Remove Snap-in. The Add or Remove Snap-ins window displays.
4.Select Certificates, and then click Add.
5.Select Computer Account, and then click Next.
6.Select Local Computer, and then click Finish.
8.In the Console window, expand the Certificates folder on the left.
9.Right-click Intermediate Certification Authorities, mouse-over All Tasks, then click Import.
10.In the Certificate Import Wizard, click Next.
11.Click Browse to find the intermediate certificate file.
12.Change the file extension filter to PKCS #7 Certificates (*.spc;*.p7b), select the *_iis_intermediates.p7b file, and then click Open.
14.Select Place all certificates in the following store.
15.Click Browse, select Intermediate Certification Authorities, and then click Next.
17.Close the Console window.
18.From the Start menu, go to Programs, Microsoft Exchange 2010, and click Exchange Management Console.
19.Click Manage Databases.
20.Click Server Configuration.
21.In Exchange Certificates, select your certificate.
22.From the Actions panel on the right, click Complete Pending Request.
23.Click Browse to locate the certificate file. The file extension might be .txt or .crt instead of .cer (search for all files).
If you receive the error, “The source data is corrupted or not properly Base64 encoded,” check the Self Signed field. If it is True, refresh console by pressing F5 on your keyboard. If it still displays True, create a new CSR and then re-key your certificate.
27.From the Actions menu, click Assign Services to Certificate.
28.Select servers, then click Next.
29.Select services you want to assign to the certificate, then click Next.
Posted in: Exchange