I installed Exchange 2007 standard, with mailbo, cas, hub roles. Please advise me how can I put the certificates on Cas serverMarian Stancescu , MCITP, MCSA

See this articel: http://technet.microsoft.com/en-us/library/bb310795(EXCHG.80).aspx

Other certificates must put on exchange, others in addtion to CAS?Marian Stancescu , MCITP, MCSA

In order to use TLS you need to have a matching certificate for that name aswell.. But this is on the HUB serverJonas Andersson MCTS: Microsoft Exchange Server 2010, Configuration | MCITP: EMA | MCSE/MCSA Blog: http://www.testlabs.se/blog

I dont use TLS, I saw that is two possibilities for request, install certificates: one from IIS, other from Exchange Management Console, what difference are? It is necessary to issue certificate server for exchange server, or it's enough to issue for web services?Marian Stancescu , MCITP, MCSA

Here's a link how to install certificate for Exchange 2007: http://www.digicert.com/ssl-certificate-installation-microsoft-unified-communications.htm Usually i install certificate for IIS and SMTPJonas Andersson MCTS: Microsoft Exchange Server 2010, Configuration | MCITP: EMA | MCSE/MCSA Blog: http://www.testlabs.se/blog

You first need to decide wherefore you need the certificates: Outlook Web Access/ ActiveSync/ RPC over HTTP(S)? You always must issue Exchange related certificates such as Outlook Web Access/ ActiveSync/ RPC over HTTP(S), from the Exchange Management Shell and not from IIS!

I find options to install certificates from IIS and from Exchange Management Console. What differences are?Marian Stancescu , MCITP, MCSA

Hello Mario You can Install 3rd Party SSL for Exchange 2007 Server Creating cert file to get the Exchange SSL Certificate. Please go through the link to add the information of your Organization https://www.digicert.com/easy-csr/exchange2007.htm Login to your Exchange 2007 server Click Start > Programs > Microsoft Exchange Server 2007 > Exchange Management Shell Paste the New-ExchangeCertificate command from this page into the Exchange Management Shell window and press Enter Your CSR file should now be in C:\ on your server (as named by the -Path option in the command itself.) Please go through the link below for requesting the SSL Certificate before deploying in Exchange 2007. https://forms.rapidssl.com/websurveys/servlet/ActionMultiplexer?Action_ID=ACT2000&WSD_surveyInfoID=659&WSD_mode=3&toc=J0GS7-659-03-26 How to create, import, and enable Exchange 2007 certificates. After you receive the certificate from Rapid SSL, please do this procedure: Run the command in the Exchange Management Shell on your server: Copy your_domain_name.cer to C:\ on your Exchange server. Open the Exchange Management Shell. Click Start, click Programs, and then click Microsoft Exchange Server 2007. Then click Exchange Management Shell. Run the Import-Exchange Certificate and Enable-ExchangeCertificate commands together (both commands are run on the same line, separated by a pipe character) Import-ExchangeCertificate -Path C:\your_domain_name.cer | Enable-Exchange Certificate -Services "IIS" Verify that your certificate is enabled by running the Get-ExchangeCertificate command. [PS] C:\> Get-ExchangeCertificate -DomainName yourdomain.com Thumbprint Services Subject ---------- -------- ------- 136849A2963709E2753214BED76C7D6DB1E4A270 SIP.W CN=yourdomain.name o Select and copy the thumbprint and Run this command to enable certificate: Enable-Exchange Certificate -Thumbprint [paste] -Services "IIS" Test your certificate by connecting to your server with IE. Thanks Mhussain

Any update on this one?Jonas Andersson MCTS: Microsoft Exchange Server 2010, Configuration | MCITP: EMA | MCSE/MCSA Blog: http://www.testlabs.se/blog

Finaly , i made migration but i have 2 problems, scenario is as follows: I have one server Windows 2003 Enterpise who are roles: Domain Controller, Exchange (hub, mailbox, cas), CA. I want to move all roles on another server. I installed Windows 2003 Enterprise, CA on one server, and Exchange on second server. The 2 problems are: first - i can't acces with Outlook from outside of domain the new exchange server, i think is a problem with certificate who i issued. And second problem exchange servers can't acces the new domain controller in Exchange Management Console/Server Configuration/ Properties /system settings (appear one DC). Please advise me!Marian Stancescu , MCITP, MCSA