Configuring TLS and SSL for POP3 and IMAP4 Access
Applies to: Exchange Server 2010
Transport Layer Security (TLS) and Secure Sockets Layer (SSL) can be used to secure connections between your users and your Microsoft Exchange Server 2010 computers. TLS and SSL are cryptographic protocols that provide security for communications over the Internet. We strongly recommend that you use TLS and SSL to help secure communications between your POP3 and IMAP4 clients and the Exchange Server 2010 Client Access server.
You can use the Exchange Management Console and the Exchange Management Shell to configure TLS and SSL on the Exchange Server 2010 server that has the POP3 and IMAP4 services enabled.
Looking for more information about securing Client Access servers? See Securing Client Access Servers.
Configuring TLS and SSL
Before you configure TLS and SSL to help secure POP3 and IMAP4 access, make sure that you understand the process for configuring TLS and SSL for the Exchange 2010 Client Access server. For more information about how to help secure communications, see the following topics:
Securing Client Access Servers
Managing SSL for a Client Access Server
Install an SSL Certificate on a Client Access Server
Understanding TLS Certificates
Configuring TLS and SSL for POP3 and IMAP4
You can use either the EMC or the Shell to configure SSL or TLS for POP3 and IMAP4 on an Exchange 2010 Client Access server.
For more information about how to configure SSL and TLS for POP3 and IMAP4, see the following topics:
Configure POP3 to Use TLS or SSL
Configure IMAP4 to Use TLS or SSL
Configuring Ports for POP3 and IMAP4 When Using TLS and SSL
When you use TLS and SSL for POP3 and IMAP4 access, the Exchange 2010 Client Access server uses the ports listed in the following table to communicate with clients.
Ports for POP3 and IMAP4 access when using TLS and SSL
Protocol | Default port |
---|---|
IMAP4/SSL |
993 (TCP) |
IMAP4 with or without TLS |
143 (TCP) |
POP3/SSL |
995 (TCP) |
POP3 with or without TLS |
110 (TCP) |
By default, the values in this table are used for communicating with clients. You can specify other ports to use with POP3 and IMAP4 clients if you want to disable communication through the default ports. For more information about how to configure ports for Exchange 2010 POP3 and IMAP4 clients, read Configure IP Addresses and Ports for POP3 and IMAP4 Access.