Applies to: Exchange Server 2010 SP3, Exchange Server 2010 SP2

Topic Last Modified: 2012-07-23

You can use Internet Information Services (IIS) Manager to configure Outlook Web App virtual directories to use Secure Sockets Layer (SSL). By default, when you install the Client Access server role, an Outlook Web App virtual directory named \owa is created in the default IIS Web site on the Exchange server. By default, this virtual directory and the default Web site are configured to require SSL.

If you want to use SSL to help secure additional Outlook Web App virtual directories or Web sites that you've created, you must do so manually. To configure a site to use SSL, you must obtain a certificate and configure the Web site or virtual directory to require SSL by using that certificate.

Looking for other management tasks related to security for Outlook Web App? Check out Managing Outlook Web App Security.

Prerequisites

Identify the SSL certificate that you'll use. For more information about how to obtain and manage SSL certificates, see Managing SSL for a Client Access Server.

Use IIS Manager to configure SSL on Outlook Web App virtual directories

You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "IIS Manager" entry in the Client Access Permissions topic.

  1. In IIS Manager, select the Default Web site or the Web site where you're hosting your Outlook Web App virtual directories.

  2. On the web site Home, double-click SSL Settings.

  3. In SSL Settings, select Require SSL. Require 128-bit SSL is optional, but if checked it will provide greater security.

    Note:
    If you're using an SSL certificate that was created during Exchange Setup, an error message will appear to notify you that the certificate isn't a trusted certificate. Make sure that you trust the certification authority (CA) that issued the certificate or use an SSL certificate that's trusted by your CA.
  4. Under Client Certificates, select Ignore.

  5. In the action pane, click Apply to save your changes.

After you complete this procedure, all Outlook Web App virtual directories on the Web site for which you haven't explicitly disabled SSL will be configured to use SSL.

Other Tasks

After you configure SSL on Outlook Web App virtual directories, you may also want to review: