How much should I be paying for an SSL cert for OWA?

[sidewinder]

OWA works fine here, but the self signed SSL cert prompt is annoying, as it worries some staff.

We've got an cert from Comodo for our RDS server, bought before I arrived, which is costing £768 for 3 years, which seems a lot?

I've seen there are free ones that have been discussed on here before but if the root CA isn't trusted by all browsers, theres no point

[jamesfed]

GoDaddy has UC certs (multiple domains) going for £45.99/year if you pay for 3 years up front.
We've only got a single domain with them but nothing to complain about.

[MK-2]

we used quickssl premium from trustico.com which i think was about £122 for 2 years

[glennda]

best bet is to self cert and then make a quick screen capture video on your website with a download to the cert file to setup on the clients to trust your server.

its then free

[john]

We use Godaddy for ours UCC certificate for exchange and the single ones for the MIS and HAP, think its about £150 for the three for the year so not too bad to give that added reassurance

[Chris_]

You can get free ones from JANET if you're a customer: Free SSL Certificates for JANET connected schools

We've got a couple from them

[jamesfed]

We use Godaddy for ours UCC certificate for exchange and the single ones for the MIS and HAP, think its about £150 for the three for the year so not too bad to give that added reassurance

Just along the lines of the above quote when we got the SSL for Home Access we did it to minimise the confusion to the students when logging in - origionaly the SMT wanted to save the cash but we soon brought them round as to how little it costs.

[sukh]

make sure you get a 3rd party cert and not a self signed, you will run into issues.

[TechMonkey]

We got a RapidSSL Wildcard from Trustico. I think it was about £500 for 5 years. Well worth it to cover OWA, Home Access & various other online services we run. It solved so many problems and queries after having used self certificates.

[Arthur]

A five year UC cert from GoDaddy costs £195.46 for 5 domains or £356.96 for 10 domains (if you use the REV11 discount code which gives you 15% off). We went with GoDaddy because it was the cheapest option.

I think DigiCert may be your only option if you want a combined SAN/UC and wildcard cert however. e.g. for ancient Windows Mobile 5 devices.

best bet is to self cert and then make a quick screen capture video on your website with a download to the cert file to setup on the clients to trust your server.

That would be absolute hell from a support perspective! I can't think of anything worse.

[pete]

best bet is to self cert and then make a quick screen capture video on your website with a download to the cert file to setup on the clients to trust your server.

its then free

It's unreasonable to expect ~1000 end-users and/or their parents to faff about in this manner, especially when it teaches them to ignore SSL errors, when you could remove the whole problem for £50/yr.

GoDaddy here with SAN cert for Exchange and standard for Moodle.

[john]

It's unreasonable to expect ~1000 end-users and/or their parents to faff about in this manner, especially when it teaches them to ignore SSL errors, when you could remove the whole problem for £50/yr.

GoDaddy here with SAN cert for Exchange and standard for Moodle.

That is the exact reasoning why we buy the SSL certificates, its not good practise to teach people to ignore the warnings.

[glennda]

It's unreasonable to expect ~1000 end-users and/or their parents to faff about in this manner, especially when it teaches them to ignore SSL errors, when you could remove the whole problem for £50/yr.

GoDaddy here with SAN cert for Exchange and standard for Moodle.

I didn't say don't cert i said self cert and then instruct users to install the certificate to trust your authority. I havn't done it yet but will be when i update our remote access.

I think @Ric_ does this aswell from when i was poking around his website

[jamesfed]

I didn't say don't cert i said self cert and then instruct users to install the certificate to trust your authority. I havn't done it yet but will be when i update our remote access.

I think @Ric_ does this aswell from when i was poking around his website

Although you justify your response in that you suggest people trust your Root CA your web browser (in the first instance) still throws up a big 'ERROR - You reeeealy shouldn't be doing this'. What you suggest people then do is 'download a bit of software' to fix all their PCs problems.
I don't know about others but that sounds just like the way that way to many extra bits of unneeded and potentially malicious software makes its way on to peoples PCs - by suggesting they download something to make things work.

Also in the grand scheme lets think about mobile devices (tablets/phones) - you can't always install the Root CA on these and even if you could you are getting your users to jump through hoops just because you want to save £50 a year.

[BooBoo]

We use IPSCA a Spanish CA that have given us several free certs for Exchange (2007 + 2010) ISA and Access Gateway and internal websites.

BooBoo