+ Post New Thread
Page 1 of 3 123 LastLast
Results 1 to 15 of 32
Windows Server 2008 R2 Thread, SSL Exchange Help (ipsca) in Technical; Hi there I have an annoying problem here I create a certficate request in Exchange 2010 console Paste the code ...
  1. #1
    pritchardavid's Avatar
    Join Date
    Sep 2009
    Location
    South Ockendon, Thurrock, United Kingdom
    Posts
    932
    Thank Post
    18
    Thanked 64 Times in 58 Posts
    Rep Power
    25

    SSL Exchange Help (ipsca)

    Hi there

    I have an annoying problem here

    I create a certficate request in Exchange 2010 console

    Paste the code on the ipsca website and send the request off to them

    When I recieve the certificates I have been told your meant to instal l the two files below in these locations. But when I tried to install the ipsCA LEVEL 1 CA I could not install it to that location, the local computer directory was midding, so had to install it to the root of 'Imtermedicate cert authorities' Would that cause a problem?

    I have had the Active Directory Cerftificate Services installed on this box before, through I might need to use it. Would that be a cause of it missing the directory?


    ipsCA LEVEL 1 CA click it to install -> place all certs in following store -> tick 'show physically stores' -> Intermediciate cert authorities -> local computer




    same for ipsCA GLOBAL CA ROOT but -> trusted root cert authories -> local computer



    I press complete certicate in Exchange 2010 console, but after this the problem happens.

    I then get this error

    'the certificate for this server is invalid for exchange server usage'


    Any ideas guys?

  2. #2

    Join Date
    Jan 2009
    Location
    Essex / Macclesfield
    Posts
    272
    Thank Post
    28
    Thanked 8 Times in 6 Posts
    Rep Power
    13
    Hi

    is this SSL for OWA?? If so, I had mega issues doing the SSL cert from the Exchange console. So I did the SSL crent though IIS and this worked fine 1st time... So if the SSL is for OWA can you not do it via IIS?

  3. #3
    pritchardavid's Avatar
    Join Date
    Sep 2009
    Location
    South Ockendon, Thurrock, United Kingdom
    Posts
    932
    Thank Post
    18
    Thanked 64 Times in 58 Posts
    Rep Power
    25
    Yes this is for OWA

    I did try creating and completing a certificate from IIS, but had the same dreaded error message

    'the certificate for this server is invalid for exchange server usage'

  4. #4

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    15,755
    Thank Post
    825
    Thanked 1,661 Times in 1,446 Posts
    Blog Entries
    11
    Rep Power
    441
    Sorry to hijack how long did your certificate take to arrive? I ordered one first thing yesterday got an approval e-mail and still waiting on it. Thanks

  5. #5
    pritchardavid's Avatar
    Join Date
    Sep 2009
    Location
    South Ockendon, Thurrock, United Kingdom
    Posts
    932
    Thank Post
    18
    Thanked 64 Times in 58 Posts
    Rep Power
    25
    About a day, requested it in the moring and get it later that evening

  6. #6

    Join Date
    Jan 2009
    Location
    Essex / Macclesfield
    Posts
    272
    Thank Post
    28
    Thanked 8 Times in 6 Posts
    Rep Power
    13
    Guess it depends on who you go though.

    I did an install in a school in Islington last month, ordered the SSL though GoDaddy, got the email to the registered email address for the domain name, clicked on the links to authorise, and got the SSL cret within about 10min. Total time. 40min max from getting the information from IIS, to getting the SSL from Godaddy, and installing it in IIS.

  7. #7

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    15,755
    Thank Post
    825
    Thanked 1,661 Times in 1,446 Posts
    Blog Entries
    11
    Rep Power
    441
    Quote Originally Posted by IKWeb View Post
    Guess it depends on who you go though.

    I did an install in a school in Islington last month, ordered the SSL though GoDaddy, got the email to the registered email address for the domain name, clicked on the links to authorise, and got the SSL cret within about 10min. Total time. 40min max from getting the information from IIS, to getting the SSL from Godaddy, and installing it in IIS.
    The difference is IPS are free

  8. #8

    Join Date
    Jan 2009
    Location
    Essex / Macclesfield
    Posts
    272
    Thank Post
    28
    Thanked 8 Times in 6 Posts
    Rep Power
    13
    Quote Originally Posted by pritchardavid View Post
    Yes this is for OWA

    I did try creating and completing a certificate from IIS, but had the same dreaded error message

    'the certificate for this server is invalid for exchange server usage'
    What type of SSL cret did you get? can you give a link to the product??

  9. #9

    Join Date
    Jan 2009
    Location
    Essex / Macclesfield
    Posts
    272
    Thank Post
    28
    Thanked 8 Times in 6 Posts
    Rep Power
    13
    Quote Originally Posted by FN-GM View Post
    The difference is IPS are free
    You cant beat free... But GoDaddy, are selling SSL certs for 8 per year, so there we go... Get a free one, you end up waiting, as you have :-( or pay 8 per year, and get it all done and setup within 40min hmmmm tuff choice. lol

  10. #10
    pritchardavid's Avatar
    Join Date
    Sep 2009
    Location
    South Ockendon, Thurrock, United Kingdom
    Posts
    932
    Thank Post
    18
    Thanked 64 Times in 58 Posts
    Rep Power
    25
    Quote Originally Posted by IKWeb View Post
    What type of SSL cret did you get? can you give a link to the product??
    SSL Certificate Authority low-cost, fully-validated 38$ SSL and 276$ Wildcard Certificates

    A1 SSL Certificate

    When Filling out the form I selected Exchange for the server type unless im meant to select IIS 7.5?

  11. #11

    Join Date
    Jan 2009
    Location
    Essex / Macclesfield
    Posts
    272
    Thank Post
    28
    Thanked 8 Times in 6 Posts
    Rep Power
    13
    I can only comment on the way I did the setup, I selected IIS for mine, as I coundt get the exchange one to work.

  12. #12
    pritchardavid's Avatar
    Join Date
    Sep 2009
    Location
    South Ockendon, Thurrock, United Kingdom
    Posts
    932
    Thank Post
    18
    Thanked 64 Times in 58 Posts
    Rep Power
    25
    Did you manage to install the ipsCA LEVEL 1 CA cert to Intermediciate cert authorities -> local computer?

    I couldnt install it to local computer ,it was not there to select, hense i just had to install it to the root of Intermediciate cert authorities instead

    Maybe thats the problem? Cause it cant identifity that cert because its ibeen installed in the wrong place?

    The only reason I can think why that location is not there to select is because this server was a CA (Active Directory Cerficate Services), has been removed since. Managed to install the SSL cert for our Remote Desktop Server which was not a CA (AD CS)


    Gusse I will have to contact ipsca support, see what they say
    Last edited by pritchardavid; 8th June 2011 at 09:40 PM.

  13. #13

    Join Date
    Jan 2006
    Location
    Surburbia
    Posts
    2,178
    Thank Post
    74
    Thanked 307 Times in 243 Posts
    Rep Power
    115
    I'm sure you need to put these certs in the computer store, if you haven't they're probably in Administrators's store and none of the exchange services can access them

    How about running mmc, add a snap-in, select "certificates", select 'computer account' etc. Does that work? If so then can you then r-click the relevant store name from their instructions and import whatever cert files you've been given?

  14. #14

    Join Date
    Apr 2008
    Posts
    853
    Thank Post
    111
    Thanked 112 Times in 108 Posts
    Rep Power
    45
    I can have another look tomorrow for you, didnt you right click 'complete cert' ? did you 'enable' it?

  15. #15

    Join Date
    Dec 2008
    Location
    Essex
    Posts
    2,137
    Thank Post
    1
    Thanked 326 Times in 316 Posts
    Rep Power
    77
    1. Check your cert > run Get-ExchangeCertificate |fl >c:\cert.txt from the ems and check status
    2. run Enable-ExchangeCertificate certificate -services IIS in the ems
    3. Confirm is it a UCC cert
    4. Make sure you have put the cert in the right place
    5. Check the purpose of the cert
    6. What base OS are you using inclu SP, 2008 or r2?

    Sukh
    Last edited by sukh; 8th June 2011 at 11:13 PM.

SHARE:
+ Post New Thread
Page 1 of 3 123 LastLast

Similar Threads

  1. ipsCA Global CA Root
    By KK20 in forum Windows
    Replies: 40
    Last Post: 16th June 2011, 11:18 PM
  2. Exchange ssl cert up for renewal.. who to use?
    By RabbieBurns in forum Internet Related/Filtering/Firewall
    Replies: 29
    Last Post: 9th March 2011, 09:54 AM
  3. SSL for Exchange 2007
    By chazzy2501 in forum Windows Server 2000/2003
    Replies: 1
    Last Post: 26th January 2010, 04:17 PM
  4. Exchange 2007 & SSL hell!
    By jdibsdale in forum Windows
    Replies: 2
    Last Post: 29th October 2009, 01:07 PM
  5. SSL Certificates for Exchange 2007
    By jdibsdale in forum Windows
    Replies: 14
    Last Post: 29th May 2009, 06:40 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •