Netwacky87 Posted July 23, 2009 Posted July 23, 2009 Hi All! Hope your all having a good summer! (We've successfully done all our major work) which included updating to Server 2008 (from 2000) and moving Exchange to 2007 (from 2000)... Now my question!... Ive installed 2007 successfully!!!...first time every doing a exchange setup and it worked 1st time, even migrated the mailboxes! (i even shocked myself)! lol Now how do you setup Outlook Web Access, i keep on reading things about making a SSL Certificate? Right, how do i do this? seems like you have to pay for it?.. And will this stop the error you get saying "There is a problem with this website" and you have to click Continue all the time! BUT other than that everything works!!! lol Cheers! Mart
EduTech Posted July 23, 2009 Posted July 23, 2009 Yeah, what you will need to do is generate a CSR in IIS for an SSL Certificate making sure all the details are correct for your school/company Then you need to go to an SSL Provider such as VeriSign, Go Daddy etc and purchase an SSL Cert. I have used Godaddy and have had no problems what so ever with them, brough a wildcard the other week. anyhow you will need a Multiple Domain Certificate, also called Unified Communications Certificate (UCC) for Exchange 2007 so from godaddy a decent cert with this is going to cost you $200.00 Once you have brought the token you then need to follow the instructions, complete all the checks until they send you the cert file. Once you have this you then just need to install the cert into IIS again using the instructions they give you. You should be ok, any problems just shout! done this alot of the past few months. James. 1
Netwacky87 Posted July 23, 2009 Author Posted July 23, 2009 Hi EduTech! Much appreciated, I dont really wanna have to spend any money just to get OWA to work!...Is that just stupid or is it me? Is there any way not to have it secured? so just through port 80.. Crazy things! Mart
DanW Posted July 23, 2009 Posted July 23, 2009 Hi EduTech! Much appreciated, I dont really wanna have to spend any money just to get OWA to work!...Is that just stupid or is it me? Is there any way not to have it secured? so just through port 80.. Crazy things! Mart You can make your own SSL certs, although i picked up a SSL cert for $9.95 the other day through enom ( although i have a reseller account with them ) You can get 'cheap' ones from RapidSSL: Free SSL Certificates, Wildcard SSL, QuickSSL cheapest $69.99 (which is the same one i paid $9.95 for!) https://www.godaddy.com/gdshop/ssl/ssl.asp < go-daddy also do cheap SSL Certs - £18.20 Dan
EduTech Posted July 23, 2009 Posted July 23, 2009 Hi EduTech! Much appreciated, I dont really wanna have to spend any money just to get OWA to work!...Is that just stupid or is it me? Is there any way not to have it secured? so just through port 80.. Crazy things! Mart Hi, You may not want to spend any money to get OWA to work, which is fine don’t use OWA :-) But obviously OWA is a must especially in a school and for external access, with the sensitivity if data been passed through it is very important it is through a secure protocol 443 Yes you could go through port 80 but this would then bring along implications from a security point of view and is NOT recommended. It does not cost much for a decent SSL Certificate these days, and as Dan said above you could make sure own self signed certificate but i would recommend you do get a signed certificate from a known/trusted distributor i.e. VeriSign, Go Daddy etc. Hope this helps, James.
Jobos Posted July 23, 2009 Posted July 23, 2009 Would a certs from SSL Certificates SSL Wildcard SSL Free Certificates SSL Server Certificate 256 bits not work which are free?
EduTech Posted July 23, 2009 Posted July 23, 2009 Would a certs from SSL Certificates SSL Wildcard SSL Free Certificates SSL Server Certificate 256 bits not work which are free? it says free for .edu but i am guessing they also mean .sch.uk aswell? but the answer is yes, if the certificate is a UCC Certificate then it will work.
Jobos Posted July 23, 2009 Posted July 23, 2009 (edited) I got a free cert from these people last week and it works fine with Exchange 2003. Maybe this cert won't work with Exchange 2007. See here http://www.edugeek.net/forums/how-do-you-do/25922-how-create-certificate-request-exchange-2007-ucc.html Edited July 23, 2009 by Jobos
EduTech Posted July 23, 2009 Posted July 23, 2009 I got a free cert from these people last week and it works fine with Exchange 2003. Yeah it would work with Exchange 2003, Exchange 2007 gets a little more complicated! pain in the backside tbh. Exchange 2007 is different to 2003/2000 when it comes to SSL certificates. To use 2007s features externally you need a special certificate (Unified Communication Certificate or UCC) which contains 'alternative' credentials. James.
Netwacky87 Posted July 23, 2009 Author Posted July 23, 2009 Why does MS ensist on changing things! so annoying as when we had exchange 2000 it was so simple to setup OWA, now im completly lost lol
EduTech Posted July 23, 2009 Posted July 23, 2009 Why does MS ensist on changing things! so annoying as when we had exchange 2000 it was so simple to setup OWA, now im completly lost lol Thats the microsoft way isn't it? :-) So, do you understand what's been said above? or are you unsure on something...? James.
Netwacky87 Posted July 23, 2009 Author Posted July 23, 2009 To True No i understand totally, just dont understand WHY i have to do it, we never used SSL or even https:// with our old exchange 2000, just means its going to be a pain in the backside, and money we didnt plan on spending!... But if its a must! Cheers EduTech!
EduTech Posted July 23, 2009 Posted July 23, 2009 No Problem mate, yeah it's a bit of a pain if you have not budgeted for this cost, although tbh really you should of been looking to have your email over https anyhow.. i would never even think about publishing OWA over HTTP. Good Luck anyhow, hope you get it sorted. If you need any help just shout. James.
legaleagle1 Posted July 26, 2009 Posted July 26, 2009 Hiya, We have Exchange 2007 and are using OWA. To do it properly you do have to have a Unified Coms Certificate. We dont and people just have to press the continue button if they are accessing form outside. From inside though, you can generate your own SSL certificate (using selfSSL) and deploy it to your stations through AD, so your internal stations do not get the message. That wont help from outside though sorry!
EduTech Posted July 26, 2009 Posted July 26, 2009 Hiya, We have Exchange 2007 and are using OWA. To do it properly you do have to have a Unified Coms Certificate. We dont and people just have to press the continue button if they are accessing form outside. From inside though, you can generate your own SSL certificate (using selfSSL) and deploy it to your stations through AD, so your internal stations do not get the message. That wont help from outside though sorry! To be honest, if it's a school or any business for that matter it should be done properly! In this day and age you really dont want to take the risk doing things on the cheap with data SelfSSL should really be used for Testing Purposes only James.
binky Posted July 27, 2009 Posted July 27, 2009 it says free for .edu but i am guessing they also mean .sch.uk aswell? but the answer is yes, if the certificate is a UCC Certificate then it will work. ipsCA is an official certification authority, the .edu offer applies to all education establishments regardless of their domain (we have a .co.uk, ex2007 and an ipsCA free cert!)
EduTech Posted July 27, 2009 Posted July 27, 2009 ipsCA is an official certification authority, the .edu offer applies to all education establishments regardless of their domain (we have a .co.uk, ex2007 and an ipsCA free cert!) Awesome! always handy to know.. cheers!
FragglePete Posted July 30, 2009 Posted July 30, 2009 We have our Exchange 2007 Server setup with a free cert from ipsCA. Granted, I'm only allowing basic OWA access on the outside, so a standard cert is working nicely for it. I've tweaked our internal DNS to have the external address pointing to the internal IP address, so the again the standard Cert works with no problems. The only thing with ipsCA is you have to install a couple of chain certificates also which you download from their website. But it works, with no problems. And free! Staff are really liking Exchange 2007, but its a lot more complicated to administer than previous versions. Really need to know your PowerShell to start doing fancy stuff with it. Pete
binky Posted July 30, 2009 Posted July 30, 2009 We have our Exchange 2007 Server setup with a free cert from ipsCA. Granted, I'm only allowing basic OWA access on the outside, so a standard cert is working nicely for it. I've tweaked our internal DNS to have the external address pointing to the internal IP address, so the again the standard Cert works with no problems. The only thing with ipsCA is you have to install a couple of chain certificates also which you download from their website. But it works, with no problems. And free! Staff are really liking Exchange 2007, but its a lot more complicated to administer than previous versions. Really need to know your PowerShell to start doing fancy stuff with it. Pete Chaining is commonplace now, instead of having loads of root certificates, CAs are using intermediate certificate authorities (a CA under the root) to sign certificates. Now, when you install your certificate on your server the root is available but it does not like it since the intermediate CA cert is not installed (and is not distributed). This has to be installed on the server since the server sends the entire certificate chain to the client, and so long as the root is installed on the client, it can get the rest of the chain from the server to validate the cert.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now