Applies to: Exchange Server 2007 SP3, Exchange Server 2007 SP2, Exchange Server 2007 SP1, Exchange Server 2007
Topic Last Modified: 2007-08-22

This topic explains how to use the Exchange Management Console or the Exchange Management Shell to configure Post Office Protocol version 3 (POP3) to use Transport Layer Security (TLS) or Secure Sockets Layer (SSL). In the original release (RTM) version of Exchange 2007, you could only configure POP3 to use TLS or SSL by using the Exchange Management Shell. In Exchange 2007 Service Pack 1 (SP1), you can also configure POP3 to use TLS or SSL by using the Exchange Management Console. Steps for doing this are included in this topic.

Note:
After you have configured POP3 to use TLS or SSL, you must restart the POP3 service. For more information about how to restart the POP3 service, see How to Start and Stop the POP3 Service.

Before You Begin

To perform this procedure, the account you use must be delegated the Exchange Server Administrators role and membership in the local Administrators group for the target server.

For more information about permissions, delegating roles, and the rights that are required to administer Microsoft Exchange Server 2007, see Permission Considerations.

Procedure

Exchange 2007 SP1

To use the Exchange Management Console to configure POP3 to use TLS or SSL

  1. In the console tree, expand Server Configuration, and then click Client Access.

  2. In the work pane, click the POP3 and IMAP4 tab.

  3. In the work pane, select POP3 and then, in the action pane, click Properties.

  4. On the POP3 Properties page, click the Authentication tab.

  5. In the box under X.509 certificate name, enter the name of the certificate.

  6. Click Apply, and then click OK to save your changes.

To use the Exchange Management Shell to configure POP3 to use TLS or SSL

  • Run the following command:

    Copy Code 
    Set-PopSettings -server Server01 -X509CertificateName CertificateName01

For more information about syntax and parameters, see Set-POPSettings.

Exchange 2007 RTM

To use the Exchange Management Shell to configure POP3 to use TLS or SSL

  • Run the following command:

    Copy Code 
    Set-PopSettings -server Server01 -X509CertificateName CertificateName01

For more information about syntax and parameters, see Set-POPSettings (RTM).

For More Information

For more information about how to set up TLS or SSL on a computer that is running Exchange 2007, see Managing Client Access Security.

For more information about how to manage the POP3 protocol, see Managing POP3 and IMAP4.