{"id":2464,"date":"2022-08-12T10:12:09","date_gmt":"2022-08-12T10:12:09","guid":{"rendered":"http:\/\/galhano.com\/blog\/?p=2464"},"modified":"2026-01-20T10:39:17","modified_gmt":"2026-01-20T10:39:17","slug":"configure-wildcard-ssl-certificate-for-pop-imap-on-exchange-2010-powershell","status":"publish","type":"post","link":"https:\/\/galhano.com\/blog\/?p=2464","title":{"rendered":"Configure Wildcard SSL Certificate for POP\/IMAP on Exchange 2010 (PowerShell)"},"content":{"rendered":"\n<p>It is assumed you have your SSL wildcard certificate already installed on an Exchange 2010 server.<\/p>\n\n\n\n<p>We use Windows Server 2008 R2 Datacenter x64 in this example.<\/p>\n\n\n\n<p>Open Exchange Management&nbsp;Shell as Administrator and get a list of SSL certificates that are available:<\/p>\n\n\n\n<pre class=\"wp-block-syntaxhighlighter-code\">[PS]> Get-ExchangeCertificate\n\nThumbprint                    Services  Subject\n----------                              --------  -------\n1F70359DC0BE9CAD58F965A3C110  ...WS.    CN=*.example.com, OU=IT Dep, O=Example Comp...\n0F7FF199B11E662621D80700D04F  ....S.    CN=ExampleDC<\/pre>\n\n\n\n<p> When you enable the wildcard <em>*.example.com<\/em>&nbsp;certificate for POP service, you normally get the following error: <\/p>\n\n\n\n<pre class=\"wp-block-syntaxhighlighter-code\">PS]> Enable-ExchangeCertificate -Thumbprint 1F70359DC0BE9CAD58F965A3C110 -Services POP\nWARNING: This certificate with thumbprint 1F70359DC0BE9CAD58F965A3C110 and subject '*.example.com' cannot used for POP SSL\/TLS connections because the subject is not a Fully Qualified Domain Name (FQDN). Use command Set-POPSettings to set X509CertificateName to the FQDN of the service.<\/pre>\n\n\n\n<p> The same applies to IMAP: <\/p>\n\n\n\n<pre class=\"wp-block-syntaxhighlighter-code\">[PS]> Enable-ExchangeCertificate -Thumbprint 1F70359DC0BE9CAD58F965A3C110 -Services IMAP\nWARNING: This certificate with thumbprint 1F70359DC0BE9CAD58F965A3C110 and subject '*.example.com' cannot used for IMAP SSL\/TLS connections because the subject is not a Fully Qualified Domain Name (FQDN). Use command Set-IMAPSettings to set X509CertificateName to the FQDN of the service.<\/pre>\n\n\n\n<p> Set FQDN for POP service to fix the error: <\/p>\n\n\n\n<pre class=\"wp-block-syntaxhighlighter-code\">[PS]> Set-POPSettings -X509CertificateName exchange2010.example.com<\/pre>\n\n\n\n<p> Do the same for IMAP service: <\/p>\n\n\n\n<pre class=\"wp-block-syntaxhighlighter-code\">[PS]> Set-IMAPSettings -X509CertificateName exchange2010.example.com<\/pre>\n\n\n\n<p> Verify POP settings: <\/p>\n\n\n\n<pre class=\"wp-block-syntaxhighlighter-code\">[PS]> Get-POPSettings\n\nUnencryptedOrTLSBindings  SSLBindings            LoginType    X509CertificateName\n------------------------  -----------            ---------    -------------------\n{:::110, 0.0.0.0:110}     {:::995, 0.0.0.0:995}  SecureLogin  exchange2010.example...<\/pre>\n\n\n\n<p> Verify IMAP settings: <\/p>\n\n\n\n<pre class=\"wp-block-syntaxhighlighter-code\">[PS]> Get-IMAPSettings\n\nUnencryptedOrTLSBindings  SSLBindings            LoginType    X509CertificateName\n------------------------  -----------            ---------    -------------------\n{:::143, 0.0.0.0:143}     {:::993, 0.0.0.0:993}  SecureLogin  exchange2010.example...<\/pre>\n\n\n\n<p> Restart POP and IMAP services: <\/p>\n\n\n\n<pre class=\"wp-block-syntaxhighlighter-code\">[PS]> Restart-service MSExchangePOP3\n[PS]> Restart-service MSExchangeIMAP4<\/pre>\n\n\n\n<p>Source link:<\/p>\n\n\n\n<p><a href=\"https:\/\/www.lisenet.com\/2014\/configure-wildcard-ssl-certificate-for-pop-imap-on-exchange-2010-server\/\">https:\/\/www.lisenet.com\/2014\/configure-wildcard-ssl-certificate-for-pop-imap-on-exchange-2010-server\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>It is assumed you have your SSL wildcard certificate already installed on an Exchange 2010 server. We use Windows Server 2008 R2 Datacenter x64 in this example. Open Exchange Management&nbsp;Shell as Administrator and get a list of SSL certificates that are available: When you enable the wildcard *.example.com&nbsp;certificate for POP service, you normally get the [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[21,22,155],"tags":[],"class_list":["post-2464","post","type-post","status-publish","format-standard","hentry","category-exchange","category-microsoft","category-ssl","author-admin"],"_links":{"self":[{"href":"https:\/\/galhano.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/2464","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/galhano.com\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/galhano.com\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/galhano.com\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/galhano.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2464"}],"version-history":[{"count":2,"href":"https:\/\/galhano.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/2464\/revisions"}],"predecessor-version":[{"id":2466,"href":"https:\/\/galhano.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/2464\/revisions\/2466"}],"wp:attachment":[{"href":"https:\/\/galhano.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2464"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/galhano.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2464"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/galhano.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2464"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}