+ Post New Thread
Results 1 to 7 of 7
Internet Related/Filtering/Firewall Thread, Exchange 2010 SSL certificate advice in Technical; We're looking to upgrade from exchange 2003 to 2010 and from what I read here and been told, the current ...
  1. #1
    dgsmith's Avatar
    Join Date
    Nov 2007
    Location
    Merseyside, England
    Posts
    1,101
    Thank Post
    118
    Thanked 90 Times in 78 Posts
    Rep Power
    36

    Exchange 2010 SSL certificate advice

    We're looking to upgrade from exchange 2003 to 2010 and from what I read here and been told, the current single domain certificate we bought will not be functional with 2010.

    Looking on godaddy, the other 2 options are "multiple domains" and "single domains with unlimited sub domains (wildcard)", both which are showing as being compatible with exch2010 but the latter is quite significantly more expensive.

    We use https://mail.schooldomain.com to access OWA but I can't work out which of these 2 we'd need. Would the cheaper multiple domains suffice or is there a reason why we'd need to opt for the wildcard one?

  2. #2

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    15,773
    Thank Post
    865
    Thanked 1,663 Times in 1,448 Posts
    Blog Entries
    11
    Rep Power
    442
    You need a subject alternative name (SAN) certificate - have a look here Subject Alternative Name | SAN Certificates (UCC Certificate)

  3. #3

    AngryTechnician's Avatar
    Join Date
    Oct 2008
    Posts
    3,730
    Thank Post
    698
    Thanked 1,210 Times in 761 Posts
    Rep Power
    394
    I believe the cheaper cert will suffice. Unless you have a non-standard setup, you only need to cover 2 domain names: the URL used internally by Outlook and internal webmail use, and the external URL you've given above.

  4. #4

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    15,773
    Thank Post
    865
    Thanked 1,663 Times in 1,448 Posts
    Blog Entries
    11
    Rep Power
    442
    Quote Originally Posted by AngryTechnician View Post
    I believe the cheaper cert will suffice. Unless you have a non-standard setup, you only need to cover 2 domain names: the URL used internally by Outlook and internal webmail use, and the external URL you've given above.
    Auto discover is another one. IF you dont use a SAN you will get security errors from Outlook. Although you can do some trickery to get it to work with a standard certificate but this isnt supported my MS

  5. #5

    glennda's Avatar
    Join Date
    Jun 2009
    Location
    Sussex
    Posts
    7,786
    Thank Post
    272
    Thanked 1,130 Times in 1,026 Posts
    Rep Power
    348
    When you run the CSR generator it will tell you everything you require.

    I use the multiple domain UCC from godaddy - SSL Certificates | Secure Your Data & Transactions - Go Daddy

  6. #6
    chazzy2501's Avatar
    Join Date
    Jan 2008
    Location
    South West
    Posts
    1,774
    Thank Post
    213
    Thanked 263 Times in 213 Posts
    Rep Power
    67
    I have exchange 2007. Can I not get a standard SSL cert for just IIS thus OWA? Using only the external URL? (this is all I use internal DNS points to local ip anyway)

  7. #7

    Join Date
    Oct 2008
    Posts
    213
    Thank Post
    2
    Thanked 11 Times in 11 Posts
    Rep Power
    21
    for our exchange 2010 we use or internal and external name plus autodiscover. We choose to use a different OWA address.

    if you dont care about autodiscover then you might be able to get away with mail.DOMAIN and use DNS workarounds internally. We use "certificates for exchange" SAN cert.

SHARE:
+ Post New Thread

Similar Threads

  1. Importing Exchange 2010 SSL Certificate
    By FN-GM in forum Enterprise Software
    Replies: 3
    Last Post: 30th April 2012, 11:50 PM
  2. Setting up Exchange 2010 SSL for OWA, ActiveSync etc
    By MrWu in forum Enterprise Software
    Replies: 1
    Last Post: 15th January 2012, 08:20 PM
  3. Updating exchange server SSL certificate
    By mrbios in forum Enterprise Software
    Replies: 2
    Last Post: 23rd August 2011, 09:26 PM
  4. in a muddle with exchange 2010 sp1 (owa and certificates)
    By sacrej in forum Windows Server 2008 R2
    Replies: 5
    Last Post: 13th October 2010, 09:26 AM
  5. SSL Certificates for Exchange 2007
    By jdibsdale in forum Windows
    Replies: 14
    Last Post: 29th May 2009, 06:40 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •