Checkboxes Greyed Out When Managing Services for an Exchange 2013 SSL Certificate

When you are managing services for an Exchange Server 2013 SSL certificate via the Exchange Admin Center you may notice that the checkboxes for enabled services are greyed out and can’t be unticked.


Exchange 2013 will not allow you to disable/unassign an SSL certificate from a service that requires SSL. Instead, you should enable another SSL certificate to that service, which will automatically disable the existing one for you (for that specific service, not necessarily all services).

About Paul Cunningham

Paul is a Microsoft Exchange Server MVP and publisher of Exchange Server Pro. He also holds several Microsoft certifications including for Exchange Server 2007, 2010 and 2013. Find Paul on Twitter, LinkedIn or Google+, or get in touch for consulting/support engagements.


  1. Paul

    To clarify, the self-signed certificate cant be managed, but explicit cert that we assign, can be managed?

    Gopinath T

  2. Good explanation. Can’t say it makes any sense why Microsoft does that though.

Leave a Comment


We are an Authorized DigiCert™ SSL Partner.