Exchange 2007 certificate
Hello! I have a single Exchange 2007 server (CAS + HUB + MB) in my environment. I bought a certificate from VeriSign. The only name that is contained in the certificate is www.mydomain.com, to publish the site of my company. No other subject name or SAN is configured in the certificate. For publishing OWA through SSL, I need to install a certificate on my Exchange server. I can publish OWA through SSL by installing the certificate I bought? Thanks!
January 17th, 2011 4:30pm

On Mon, 17 Jan 2011 21:26:41 +0000, bbastos wrote: >Hello! I have a single Exchange 2007 server (CAS + HUB + MB) in my environment. I bought a certificate from VeriSign. The only name that is contained in the certificate is www.mydomain.com, to publish the site of my company. No other subject name or SAN is configured in the certificate. For publishing OWA through SSL, I need to install a certificate on my Exchange server. I can publish OWA through SSL by installing the certificate I bought? Thanks! No. --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP
Free Windows Admin Tool Kit Click here and download it now
January 17th, 2011 9:53pm

Hello Rich, Why? Which SANs should I have in my certificate for the operation of external OWA and without impacting the access of internal clients? Thanks.
January 18th, 2011 6:51pm

On Tue, 18 Jan 2011 23:47:11 +0000, bbastos wrote: >Why? You'll have one URL. How will you separate the traffic for the web site from the traffic for Exchange? >Which SANs should I have in my certificate for the operation of external OWA and without impacting the access of internal clients? http://www.digicert.com/ssl-support/exchange-2007-san-names.htm --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP
Free Windows Admin Tool Kit Click here and download it now
January 18th, 2011 9:39pm

Hi bbastos, Rich gave some good suggestion, other information for you: http://technet.microsoft.com/en-us/library/bb851505(EXCHG.80).aspx Regards! GavinPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
January 21st, 2011 1:59am

Hello Gavin-Zhang, What do you think about the following solution? http://support.microsoft.com/kb/940726/en-us (Configure all the internal URLs for the Exchange virtual directories to www.mydomain.com and configure the internal DNS to resolve www.mydomain.com to internal IP of the CAS Server?). Thanks!
Free Windows Admin Tool Kit Click here and download it now
January 24th, 2011 7:50pm

Hi bbastos, Sure, we could do that, but if we use outlookanywhere for external users, we need autodisover.domainname.com as a SAN in the certificate, and the autodiscover service URL will be either of below: https://<smtp-address-domain>/autodiscover/autodiscover.xml https://autodiscover.<smtp-address-domain>/autodiscover/autodiscover.xml Some information for you: http://technet.microsoft.com/en-us/library/bb332063(EXCHG.80).aspx Regards! GavinPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
January 24th, 2011 10:14pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics