Установка на Exchange 2016-2019 wildcard сертификат

Настраиваем сервер

Откройте PowerShell консоль

меняйте в командах mail.contoso.com на свой домен yourmail.adminotes.ru

1. Get-ExchangeCertificate
   скопируйте отпечаток сертификата, в примере 434AC224C8459924B26521298CE8834C514856A1
2. Get-ReceiveConnector -Identity "Client Frontend*" | Set-ReceiveConnector -Fqdn mail.contoso.com
   FQDN например mail.contoso.com
3. Enable-ExchangeCertificate -Thumbprint 434AC224C8459924B26521298CE8834C514856A1 -Services POP,IMAP,IIS,SMTP
4. Set-ImapSettings -ExternalConnectionSettings "mail.contoso.com:993:SSL", "mail.contoso.com:143:TLS" -X509CertificateName mail.contoso.com
5. Restart-Service MSExchangeIMAP4; Restart-Service MSExchangeIMAP4BE

Дополнительно:

$TLSCert = Get-ExchangeCertificate -Thumbprint 434AC224C8459924B26521298CE8834C514856A1

$TLSCertName = "$($TLSCert.Issuer)$($TLSCert.Subject)"

Get-ReceiveConnector -Identity "Client Frontend*" | Set-ReceiveConnector -TlsCertificateName $TLSCertName

Для настройки Outlook в веб и отображения SMTP настроек:

Get-ReceiveConnector -Identity "Client Frontend*" | Set-ReceiveConnector -AdvertiseClientSettings $true

Проверяем:

Get-ReceiveConnector -Identity "Client Frontend*" | Format-List Name,Fqdn,TlsCertificateName

Get-ExchangeCertificate | Format-List Thumbprint,Issuer,Subject,CertificateDomains,Services

Get-ClientAccessService | Test-ImapConnectivity -MailboxCredentia