Article ID: 192044 - View products that this article applies to.
This article was previously published under Q192044
This article has been archived. It is offered "as is" and will no longer be updated.
This article details how to set up X.509 V3 certificate support on an Exchange Server 5.5 Service Pack 1 (SP1) Key Management Server (KMS) computer that also has Microsoft Certificate Server installed.
Before you proceed with the KMS Setup, consult the following Microsoft Knowledge Base article, which details how to properly update Certificate Server to version 5.00.1671.200.
(http://support.microsoft.com/kb/184695/EN-US/ ): Readme Notes for Certificate Server Update
The updated files can be obtained from the following location:
ftp://ftp.microsoft.com/bussys/IIS/iis-public/fixes/usa/certserv/NOTE: It is important that the Microsoft Exchange Service account has at least READ-ONLY privileges on the shared CERT directory of the Microsoft Certificate server computer.
If the KMS is not installed, please consult the README file on the Exchange Server 5.5 SP1 installation disk on how to install the service.
NOTE: Once the KMS is installed, you will need to reapply SP1 for Exchange Server 5.5 or you may experience problems gaining access to some of the CA Object's property pages, specifically the "Certificate Trust List".
To enable X.509 V3 certificates on the Exchange Server 5.5 Service Pack 1 KMS, perform the following steps:
Article ID: 192044 - Last Review: October 10, 2013 - Revision: 3.3