Hi Guys,

I installed exchange 2013 on our server, problem is outlook cannot connect?

I think we purchased a wrong ssl, because we bought a standard ssl from go daddy..

Do we need to buy another ssl? for autodiscover.domain.com ? we also need a ssl for the adfs and adfs proxy?

I know that ssl are not upgradble, any idea guys? am I on the right track?

If I follow this url for autodiscover : https://acbrownit.wordpress.com/2012/12/20/internal-dns-and-exchange-autodiscover/

can it be useful? I'm nearing the deadline.. 2 more weeks and I'm dead..

This is for exchange 2013hybrid setup

You need what's known as a Unified Communications Certificate (UCC).  The CN should be the name you use for Exchange services, e.g., webmail.domain.com, and a SAN with autodiscover.domain.com.

Hi Ed,

Thanks for the reply, but adding an SRV file for autodiscover on our external DNS can fix the connection for the outlook to exchange? we'll be requesting another ssl that might take a lot of time before getting approve. I'm thinking if we can atleast make the on-premises to work. Phase 2 will be the hybrid.

Hi Guys,

Kindly check the link : https://ph.godaddy.com/web-security/ssl-certificate

what kind of ssl do I need to purchase?

we already purchased the One website / standard subscription, do I need the UCC/SAN SSL?

You may be able to use an SRV record.  Please refer to this whitepaper and verify that your DNS provider supports it.

https://technet.microsoft.com/en-us/library/bb332063(EXCHG.80).aspx

On that site click "Protect Multiple Website", which is their link to a UCC certificate as I explained to you before.

Hi Ed,

already requested our external dns provider to add an SRV for autodiscover, but we'll be really needing the fs.domain.com for the adfs proxy and adfs server, so we need to upgrade our ssl. right?