+ Post New Thread
Results 1 to 8 of 8
Windows Server 2008 Thread, OWA 2007 not accessable from the Internet in Technical; My new Exchange 2007 has a strange problem. Our OWA has always been accessed via a reverse proxy at https://webmail.mydomain.ac.uk/exchange ...
  1. #1

    Dos_Box's Avatar
    Join Date
    Jun 2005
    Location
    Preston, Lancashire
    Posts
    9,442
    Thank Post
    701
    Thanked 2,302 Times in 1,063 Posts
    Blog Entries
    23
    Rep Power
    678

    OWA 2007 not accessable from the Internet

    My new Exchange 2007 has a strange problem. Our OWA has always been accessed via a reverse proxy at https://webmail.mydomain.ac.uk/exchange and there was never a problem accessing it.
    Now they have change the IP to point at my new server on https://webmail.mydomain.ac.uk/owa it picks up the certificate error but once you click on the 'continue to this website' link it just times out (eventually).
    Is there something on Server 2008 IIS or Exchange management I need to look at?

  2. #2

    Dos_Box's Avatar
    Join Date
    Jun 2005
    Location
    Preston, Lancashire
    Posts
    9,442
    Thank Post
    701
    Thanked 2,302 Times in 1,063 Posts
    Blog Entries
    23
    Rep Power
    678
    Found the problem. When Exchange set itself up it creates it's own SSL certificate. But it did not create one with the servers FQDN name on, only its NETBIOS name.
    I've just got to create another self signed SSL certificate with the correct info on and Roberts your dads brother.

  3. #3

    Dos_Box's Avatar
    Join Date
    Jun 2005
    Location
    Preston, Lancashire
    Posts
    9,442
    Thank Post
    701
    Thanked 2,302 Times in 1,063 Posts
    Blog Entries
    23
    Rep Power
    678
    But I'm dammed if I can get it to work. Anyone here have a link to guide to creating a working SSL certificate for Exchange 2007. And (dummy that I am I deleted the original one). Not to worry though as I think we are going to buy a full cert tomorrow.

  4. #4

    john's Avatar
    Join Date
    Sep 2005
    Location
    London
    Posts
    10,447
    Thank Post
    1,537
    Thanked 1,069 Times in 934 Posts
    Rep Power
    305
    Could you not get a free one from that SSL Place thats recommended on here, was it something like comodo or something like that

  5. #5

    Dos_Box's Avatar
    Join Date
    Jun 2005
    Location
    Preston, Lancashire
    Posts
    9,442
    Thank Post
    701
    Thanked 2,302 Times in 1,063 Posts
    Blog Entries
    23
    Rep Power
    678
    Right, after some reading up (and a call to Comodo this morning) I shall impart some valuble information to you.
    Exchange 2007 is different to 2003/2000 when it comes to SSL certificates. To use 2007s features externally you need a special certificate (called the Unified Communication Certificate or UCC) which contains 'alternative' credentials. To generate a request for these you need to use the Exchange management shell with the 'New-ExchangeCertificate' command (here is their support site article: https://support.comodo.com/index.php...articleid=1143)
    Unfortunately I can't get it to generate a request file and I get no error comeback. Has anyone here gone through this process and if so can you give me the full syntax for my server request?

    Servername - ictc3.mydomain.ac.uk

  6. #6

    Dos_Box's Avatar
    Join Date
    Jun 2005
    Location
    Preston, Lancashire
    Posts
    9,442
    Thank Post
    701
    Thanked 2,302 Times in 1,063 Posts
    Blog Entries
    23
    Rep Power
    678
    Ah, got it. I don't know why it didn't work the first time!

  7. #7
    joe90bass's Avatar
    Join Date
    Oct 2007
    Location
    S Wales
    Posts
    1,355
    Thank Post
    329
    Thanked 107 Times in 96 Posts
    Rep Power
    51
    After migrating to 2007 from 2003 I spent ages trying to get our OWA address to stay as https://www.school.blah.di.blah/exchange not https://blah..../owa I gave up and went with /owa and let staff know the new address from home.

    I also had fun with the certificates, and in the end bought one from instantssl (Comodo) I didn't get the UCC oe though, what features of Exchange are you using? The bog standard instantssl one works fine with OWA

  8. #8

    Dos_Box's Avatar
    Join Date
    Jun 2005
    Location
    Preston, Lancashire
    Posts
    9,442
    Thank Post
    701
    Thanked 2,302 Times in 1,063 Posts
    Blog Entries
    23
    Rep Power
    678
    Quote Originally Posted by joe90bass View Post
    After migrating to 2007 from 2003 I spent ages trying to get our OWA address to stay as https://www.school.blah.di.blah/exchange not https://blah..../owa I gave up and went with /owa and let staff know the new address from home.

    I also had fun with the certificates, and in the end bought one from instantssl (Comodo) I didn't get the UCC oe though, what features of Exchange are you using? The bog standard instantssl one works fine with OWA

    We will be pushing email and using active sync online. You need the signed version for this. I was told (by Comodo) that the standard SSl cert would not work, and indeed it didn't for me.



SHARE:
+ Post New Thread

Similar Threads

  1. OWA 2007 on Server 2008
    By Dos_Box in forum Windows Server 2008
    Replies: 4
    Last Post: 27th September 2011, 01:31 PM
  2. Import contacts into OWA 2007
    By blackcat in forum How do you do....it?
    Replies: 2
    Last Post: 14th July 2009, 03:33 PM
  3. OWA 2007 Rendering Problem
    By Dos_Box in forum Windows Server 2008
    Replies: 21
    Last Post: 20th February 2009, 10:01 AM
  4. OWA down
    By Ryan in forum Windows
    Replies: 19
    Last Post: 7th March 2008, 03:27 PM
  5. Can you update Internet mobile to Internet Explorer?
    By thegrassisgreener in forum Windows
    Replies: 1
    Last Post: 16th July 2007, 02:48 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •