Certificates - i hate them

[timbo343]

I have had to renew our exchange server and decided to use go daddy to get one however i think i may have got the wrong type of certificate. Ive always tried to get outlook anywhere to work on mobile devices and never had any look. Looking into things, I have my certificate which is securing mail.mydomain.com however do i need a certificate for autodiscover.mydomain.com? Also, would i need to buy a UC certificate so i can then add SAN to it such as autodiscover. & mail. ?

[FN-GM]

Yep you need a SAN cert. You can use a wildcard certificate as well. Thats what we use, it also means we can use it on other services as well.

[timbo343]

Buggar, thanks zak. Just tops of a really bad friday i guess. Will have to see if godaddy will let me cancel the standard one and get a multi site one.

[FN-GM]

What version of Exchange do you have? You can get it to generate a CSR so you get the correct settings etc. I know you can do it in 2013 and 2010 but not sure about 2007.

[timbo343]

Im using 2010.

[timbo343]

If i follow something like this it might work http://www.digicert.com/csr-creation-microsoft-exchange-2010.htm

[FN-GM]

Use the Wizzard to generate your CSR, it will make it bang on then.

 

Godaddy should be able to refund the cert and credit the cost to your account. You can then top up that and get a SAN.

[timbo343]

Yeah i used the wizard in the first place thinking a normal ssl cert would be fine. No one has ever told me i needed a UCC cert in all the years ive had exchange. I just thought i was something that i had over looked in exchange, not actually the cert.

[FN-GM]

If you think 2010 is a pain, try 2007! Im switching to Office 365, i like Exchange but the certificates are a real pain!

[timbo343]

Yep, i know about 2007. I had it for about 2 years, although it was a step in the right direction for exchange its missing a few features such as certificate request. I still have the command written down for PS 2007. You do right moving to O365. I would like to but our internet connection is still a little flakey at times but not as bad as it has been.

 

And thats another thing, i didnt know i could rekey certificates, so that company i was using in the past to issue my certs was charging me 64 quid everytime i wanted to change something.. grrr!

Edited May 23, 2014 by timbo343

[robjduk]

if it makes you feel better I just pay a local tech company to sort out my certs. They charge a little on top of each one to just make it go away. Life is to short to be dicking about with things like certs.