+ Post New Thread
Results 1 to 7 of 7
Internet Related/Filtering/Firewall Thread, Exchange 2010 SSL certificate advice in Technical; We're looking to upgrade from exchange 2003 to 2010 and from what I read here and been told, the current ...
  1. #1
    dgsmith's Avatar
    Join Date
    Nov 2007
    Location
    Merseyside, England
    Posts
    1,104
    Thank Post
    118
    Thanked 90 Times in 78 Posts
    Rep Power
    36

    Exchange 2010 SSL certificate advice

    We're looking to upgrade from exchange 2003 to 2010 and from what I read here and been told, the current single domain certificate we bought will not be functional with 2010.

    Looking on godaddy, the other 2 options are "multiple domains" and "single domains with unlimited sub domains (wildcard)", both which are showing as being compatible with exch2010 but the latter is quite significantly more expensive.

    We use https://mail.schooldomain.com to access OWA but I can't work out which of these 2 we'd need. Would the cheaper multiple domains suffice or is there a reason why we'd need to opt for the wildcard one?

  2. #2

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    15,957
    Thank Post
    886
    Thanked 1,700 Times in 1,477 Posts
    Blog Entries
    12
    Rep Power
    448
    You need a subject alternative name (SAN) certificate - have a look here Subject Alternative Name | SAN Certificates (UCC Certificate)

  3. #3

    AngryTechnician's Avatar
    Join Date
    Oct 2008
    Posts
    3,730
    Thank Post
    698
    Thanked 1,212 Times in 761 Posts
    Rep Power
    394
    I believe the cheaper cert will suffice. Unless you have a non-standard setup, you only need to cover 2 domain names: the URL used internally by Outlook and internal webmail use, and the external URL you've given above.

  4. #4

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    15,957
    Thank Post
    886
    Thanked 1,700 Times in 1,477 Posts
    Blog Entries
    12
    Rep Power
    448
    Quote Originally Posted by AngryTechnician View Post
    I believe the cheaper cert will suffice. Unless you have a non-standard setup, you only need to cover 2 domain names: the URL used internally by Outlook and internal webmail use, and the external URL you've given above.
    Auto discover is another one. IF you dont use a SAN you will get security errors from Outlook. Although you can do some trickery to get it to work with a standard certificate but this isnt supported my MS

  5. #5

    glennda's Avatar
    Join Date
    Jun 2009
    Location
    Sussex
    Posts
    7,808
    Thank Post
    272
    Thanked 1,135 Times in 1,031 Posts
    Rep Power
    349
    When you run the CSR generator it will tell you everything you require.

    I use the multiple domain UCC from godaddy - SSL Certificates | Secure Your Data & Transactions - Go Daddy

  6. #6
    chazzy2501's Avatar
    Join Date
    Jan 2008
    Location
    South West
    Posts
    1,782
    Thank Post
    213
    Thanked 263 Times in 213 Posts
    Rep Power
    67
    I have exchange 2007. Can I not get a standard SSL cert for just IIS thus OWA? Using only the external URL? (this is all I use internal DNS points to local ip anyway)

  7. #7

    Join Date
    Oct 2008
    Posts
    214
    Thank Post
    2
    Thanked 11 Times in 11 Posts
    Rep Power
    21
    for our exchange 2010 we use or internal and external name plus autodiscover. We choose to use a different OWA address.

    if you dont care about autodiscover then you might be able to get away with mail.DOMAIN and use DNS workarounds internally. We use "certificates for exchange" SAN cert.

SHARE:
+ Post New Thread

Similar Threads

  1. Importing Exchange 2010 SSL Certificate
    By FN-GM in forum Enterprise Software
    Replies: 3
    Last Post: 30th April 2012, 11:50 PM
  2. Setting up Exchange 2010 SSL for OWA, ActiveSync etc
    By MrWu in forum Enterprise Software
    Replies: 1
    Last Post: 15th January 2012, 08:20 PM
  3. Updating exchange server SSL certificate
    By mrbios in forum Enterprise Software
    Replies: 2
    Last Post: 23rd August 2011, 09:26 PM
  4. in a muddle with exchange 2010 sp1 (owa and certificates)
    By sacrej in forum Windows Server 2008 R2
    Replies: 5
    Last Post: 13th October 2010, 09:26 AM
  5. SSL Certificates for Exchange 2007
    By jdibsdale in forum Windows
    Replies: 14
    Last Post: 29th May 2009, 06:40 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •