SSL Exchange Help (ipsca)

Hi there

I have an annoying problem here

I create a certficate request in Exchange 2010 console

Paste the code on the ipsca website and send the request off to them

When I recieve the certificates I have been told your meant to instal l the two files below in these locations. But when I tried to install the ipsCA LEVEL 1 CA I could not install it to that location, the local computer directory was midding, so had to install it to the root of 'Imtermedicate cert authorities' Would that cause a problem?

I have had the Active Directory Cerftificate Services installed on this box before, through I might need to use it. Would that be a cause of it missing the directory?


ipsCA LEVEL 1 CA click it to install -> place all certs in following store -> tick 'show physically stores' -> Intermediciate cert authorities -> local computer




same for ipsCA GLOBAL CA ROOT but -> trusted root cert authories -> local computer



I press complete certicate in Exchange 2010 console, but after this the problem happens.

I then get this error

'the certificate for this server is invalid for exchange server usage'


Any ideas guys?

Hi

is this SSL for OWA?? If so, I had mega issues doing the SSL cert from the Exchange console. So I did the SSL crent though IIS and this worked fine 1st time... So if the SSL is for OWA can you not do it via IIS?

Yes this is for OWA

I did try creating and completing a certificate from IIS, but had the same dreaded error message

'the certificate for this server is invalid for exchange server usage'

Sorry to hijack how long did your certificate take to arrive? I ordered one first thing yesterday got an approval e-mail and still waiting on it. Thanks

About a day, requested it in the moring and get it later that evening

Guess it depends on who you go though.

I did an install in a school in Islington last month, ordered the SSL though GoDaddy, got the email to the registered email address for the domain name, clicked on the links to authorise, and got the SSL cret within about 10min. Total time. 40min max from getting the information from IIS, to getting the SSL from Godaddy, and installing it in IIS.

Quote:

---

Originally Posted by IKWeb

Guess it depends on who you go though.

I did an install in a school in Islington last month, ordered the SSL though GoDaddy, got the email to the registered email address for the domain name, clicked on the links to authorise, and got the SSL cret within about 10min. Total time. 40min max from getting the information from IIS, to getting the SSL from Godaddy, and installing it in IIS.

---

The difference is IPS are free :D

Quote:

---

Originally Posted by pritchardavid

Yes this is for OWA

I did try creating and completing a certificate from IIS, but had the same dreaded error message

'the certificate for this server is invalid for exchange server usage'

---

What type of SSL cret did you get? can you give a link to the product??

Quote:

---

Originally Posted by FN-GM

The difference is IPS are free :D

---

You cant beat free... But GoDaddy, are selling SSL certs for £8 per year, so there we go... Get a free one, you end up waiting, as you have :-( or pay £8 per year, and get it all done and setup within 40min hmmmm tuff choice. lol

Quote:

---

Originally Posted by IKWeb

What type of SSL cret did you get? can you give a link to the product??

---

SSL Certificate Authority low-cost, fully-validated 38$ SSL and 276$ Wildcard Certificates

A1 SSL Certificate

When Filling out the form I selected Exchange for the server type unless im meant to select IIS 7.5?

I can only comment on the way I did the setup, I selected IIS for mine, as I coundt get the exchange one to work.

Did you manage to install the ipsCA LEVEL 1 CA cert to Intermediciate cert authorities -> local computer?

I couldnt install it to local computer ,it was not there to select, hense i just had to install it to the root of Intermediciate cert authorities instead

Maybe thats the problem? Cause it cant identifity that cert because its ibeen installed in the wrong place?

The only reason I can think why that location is not there to select is because this server was a CA (Active Directory Cerficate Services), has been removed since. Managed to install the SSL cert for our Remote Desktop Server which was not a CA (AD CS)


Gusse I will have to contact ipsca support, see what they say

I'm sure you need to put these certs in the computer store, if you haven't they're probably in Administrators's store and none of the exchange services can access them

How about running mmc, add a snap-in, select "certificates", select 'computer account' etc. Does that work? If so then can you then r-click the relevant store name from their instructions and import whatever cert files you've been given?

I can have another look tomorrow for you, didnt you right click 'complete cert' ? did you 'enable' it?

1. Check your cert > run Get-ExchangeCertificate |fl >c:\cert.txt from the ems and check status
2. run Enable-ExchangeCertificate certificate -services IIS in the ems
3. Confirm is it a UCC cert
4. Make sure you have put the cert in the right place
5. Check the purpose of the cert
6. What base OS are you using inclu SP, 2008 or r2?

Sukh