ca exchange certificate microsoft

Exchange Server can be configured to use Transport Layer Security (TLS) to encrypt communication between internal and external clients, and external messaging servers. Digital certificates, which are electronic files that work like an online password to verify the identity of a user or a computer, can be used for services such as encryption, authentication, and code signing. Microsoft recommends using digital certificates in Exchange Server from a commercial certificate authority (CA) for web user authentication, web server authentication, S/MIME, IPsec, and code signing. 1 The Microsoft Certificate Server can be installed on an Active Directory server to turn it into a trusted authority for the domain, and it can be used to request and issue certificates, install them on member servers, and ensure that the environment is secure. 2