RabbieBurns Posted February 23, 2011 Posted February 23, 2011 Our SSL dert is up for renewal, and Verisign are quoting us nearly $1000 a year for just a single mail.blah cert.. I use StartSSL for my cert at home, which is free, and looking around GoDaddy do a single cert for about $50 a year.. Who do you all use for your certificates? Im contempating getting a wildcard cert so I Can install it on the firewall and spam appliance to get rid of the ssl errors, does a wildcard work with exchange (2007 btw)?
CyberNerd Posted February 23, 2011 Posted February 23, 2011 try globalsign from: SchoolsICT - enabling 21st century learning 1
john Posted February 23, 2011 Posted February 23, 2011 Godaddy for all my SSL Needs I have my exchange 2010 cert from them (so that's a multi-name one) and a pair of single SSL certs from them as well and they are great to deal with 1
Edu-IT Posted February 23, 2011 Posted February 23, 2011 Godaddy for all my SSL Needs I have my exchange 2010 cert from them (so that's a multi-name one) and a pair of single SSL certs from them as well and they are great to deal with Rough pricing?
RabbieBurns Posted February 23, 2011 Author Posted February 23, 2011 whats multiname needed for exchange?
john Posted February 23, 2011 Posted February 23, 2011 whats multiname needed for exchange? 2007 and 2010 need more than one name to access it using all its features. It uses autodiscover.domain, the actual servername.domain as a bare minimum, its rather well documented online. 2003 was fine without it. Prices - http://www.godaddy.com 2
Edu-IT Posted February 23, 2011 Posted February 23, 2011 We use: ipsCA Free for Education too! Free ones not suitable for Exchange 2007/2010 for the reasons John mentioned.
bodminman Posted February 23, 2011 Posted February 23, 2011 Free ones not suitable for Exchange 2007/2010 for the reasons John mentioned. I'd better check our cert then as when we presented them with the request for a multi domain cert it wasn't queried. It was generated and sent to us and all is working well. 1
HarryMonkey Posted February 23, 2011 Posted February 23, 2011 Free ones not suitable for Exchange 2007/2010 for the reasons John mentioned. Works ok with ours. 1
sonofsanta Posted February 23, 2011 Posted February 23, 2011 2007 and 2010 need more than one name to access it using all its features. It uses autodiscover.domain, the actual servername.domain as a bare minimum, its rather well documented online. 2003 was fine without it. Prices - Domain Names, Web Hosting and SSL Certificates - Go Daddy They're a damn sight cheaper than I'd been led to expect for SSL certificates - might actually be worth the £50 a year to know that I'm not training my users to ignore security certificate errors! I take it the cert you have is the middle option of theirs, Standard SSL Multiple Domain (UCC) cert? And that so long as it's bought for school.sch.uk I can use it for all my subdomains, for MIS access as well as webmail etc.? EDIT: http://www.sslshopper.com/article-how-to-use-ssl-certificates-with-exchange-2007.html seems to cover the subdomains that want adding in to the certificate for Exch2007
achedgy Posted February 23, 2011 Posted February 23, 2011 I use domainsandbeyond.com, similar pricing to godaddy and good to deal with. Got a UCC cert and was easy to get regenerated when i upgraded from 2007 to 2010. 1
Edu-IT Posted February 23, 2011 Posted February 23, 2011 Works ok with ours. Really? Hmm. When I tried to get a UCC it didn't work. Yours is UCC, right?
Arthur Posted February 23, 2011 Posted February 23, 2011 Who do you all use for your certificates? We use a UCC certificate from GoDaddy for our Exchange 2010 server mainly because they were cheap (£345.48 - 10 domains/5 years using the REV11 discount code for 15% off the total). My only gripe with them is that their support is based in the USA, so it can take a lot longer to get issues resolved (days instead of hours). I'm contemplating getting a wildcard cert so I can install it on the firewall and spam appliance to get rid of the SSL errors, does a wildcard work with exchange (2007 btw)? Whether you go with a wildcard certificate depends upon what devices will be accessing your Exchange Server. If you want the best of both worlds, you can buy a wildcard certificate from DigiCert which enables you to add SANs to it. I think they are the only company that does this, so will be a bit more expensive than GoDaddy. 2
RabbieBurns Posted February 23, 2011 Author Posted February 23, 2011 Just spoke to GoDaddy (they have a local sydney number, was answered in 10 mins) and was speaking to their USA dept. Will go for their UCC cert for now, cheers for the discount codes.
RabbieBurns Posted February 23, 2011 Author Posted February 23, 2011 also, is there anything to be aware of if I update the cert during office hours. Will Outlook bitch? Will the server need a restart?
InterwebsGuy Posted February 24, 2011 Posted February 24, 2011 Comodo are quite good. Antivirus Firewall Software and SSL Certificate - Internet Security Software from Comodo 1
ZeroHour Posted February 24, 2011 Posted February 24, 2011 We get ours from trustico We get from them too, this is literally the cert we use (and dont buy exchange specific ones) QuickSSL® Premium For Only £65.20 - Secure Mobile Devices, Issued Within Minutes, Free GeoTrust® Site Seal (UK) 1
RabbieBurns Posted February 24, 2011 Author Posted February 24, 2011 Ordered a 5 domains/5 years using the REV11 discount code for 15% off the total, from GoDaddy, with big thanks to Arthur. Total was $300 AUD which is less than a third of the cost of the price of a single cert for a single year from verisign! In the good books today saving them a fair chunk of cash. Also, phoned their support twice today and got straight through (less than 10 mins wait) Cheers for all the other suggestions too folks, and hopefully this thread will be helpful to others in the same boat too..
EduTech Posted February 24, 2011 Posted February 24, 2011 I use RAPIDSSL Certificates and they are fairly cheap to be honest I have used godaddy in the past but there verification process seems to be a pain if you are in a school. James.
RabbieBurns Posted February 24, 2011 Author Posted February 24, 2011 whats bad about their verif. process? the 2 emails I used to sign up with (billing and tech. contact) are the same 2 email addresses listed on our WHOIS not sure if that will make it faster? What issues did you have?
EduTech Posted February 24, 2011 Posted February 24, 2011 whats bad about their verif. process? the 2 emails I used to sign up with (billing and tech. contact) are the same 2 email addresses listed on our WHOIS not sure if that will make it faster? What issues did you have? They needed to basically verify that i was asking for it from the school, but then school level was not good enough so i had to get the LEA to do it. James.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now