Internet Related/Filtering/Firewall Thread, Exchange 2010 SSL certificate advice in Technical; We're looking to upgrade from exchange 2003 to 2010 and from what I read here and been told, the current ...
21st November 2012, 10:23 AM #1
Exchange 2010 SSL certificate advice
We're looking to upgrade from exchange 2003 to 2010 and from what I read here and been told, the current single domain certificate we bought will not be functional with 2010.
Looking on godaddy, the other 2 options are "multiple domains" and "single domains with unlimited sub domains (wildcard)", both which are showing as being compatible with exch2010 but the latter is quite significantly more expensive.
We use https://mail.schooldomain.com to access OWA but I can't work out which of these 2 we'd need. Would the cheaper multiple domains suffice or is there a reason why we'd need to opt for the wildcard one?
IDG Tech News
21st November 2012, 10:38 AM #2
You need a subject alternative name (SAN) certificate - have a look here Subject Alternative Name | SAN Certificates (UCC Certificate)
21st November 2012, 10:40 AM #3
I believe the cheaper cert will suffice. Unless you have a non-standard setup, you only need to cover 2 domain names: the URL used internally by Outlook and internal webmail use, and the external URL you've given above.
21st November 2012, 10:42 AM #4
Auto discover is another one. IF you dont use a SAN you will get security errors from Outlook. Although you can do some trickery to get it to work with a standard certificate but this isnt supported my MS
Originally Posted by AngryTechnician
21st November 2012, 10:56 AM #5
When you run the CSR generator it will tell you everything you require.
I use the multiple domain UCC from godaddy - SSL Certificates | Secure Your Data & Transactions - Go Daddy
20th December 2012, 12:07 PM #6
I have exchange 2007. Can I not get a standard SSL cert for just IIS thus OWA? Using only the external URL? (this is all I use internal DNS points to local ip anyway)
20th December 2012, 12:21 PM #7
for our exchange 2010 we use or internal and external name plus autodiscover. We choose to use a different OWA address.
if you dont care about autodiscover then you might be able to get away with mail.DOMAIN and use DNS workarounds internally. We use "certificates for exchange" SAN cert.
By FN-GM in forum Enterprise Software
Last Post: 30th April 2012, 11:50 PM
By MrWu in forum Enterprise Software
Last Post: 15th January 2012, 08:20 PM
By mrbios in forum Enterprise Software
Last Post: 23rd August 2011, 09:26 PM
By sacrej in forum Windows Server 2008 R2
Last Post: 13th October 2010, 09:26 AM
By jdibsdale in forum Windows
Last Post: 29th May 2009, 06:40 PM
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)