Issue certificate for Exchange 2010 from Win 2008R2

[Greenbeast]

I'm in the process of migrating to Exchange 2010.

 

Currently we have exchange 2003 published through ISA2006, the isa server has our external cert installed but the exchange box needs a cert issued by our internal CA to authenticate with.

 

I was never that great at doing the occasional cert procedure but it also appears to have changed a bit now.

 

Can someone advise me how to prepare a cert from my 2008R2 CA for EXC2010?

[sukh]

How to Configure Exchange 2010 Certificate - Direct Experts Blog

 

Managing Certificates in Exchange Server 2010 (Part 1)

[Greenbeast]

thankyou, so now i've got the CA web enrollment issuing certificates properly, but Exchange doesn't trust it :/

[adrian_costea]

Here you go

 

Adrian Costea's blog » Request and install SAN certificate in Exchange 2010

 

Make sure the root certificate is present on your Exchange server

[adrian_costea]

Well...off course you get the error because localhost is not in the certificate SAN attribute. Type the FQDN thaat you have on the certificate and you should be good-to-go. EG: https://myserver.mydomain.com/owa

[sukh]

Make sure the cert is in the root cert exists in the local store on the Exch server, it does not need the FQDN of the Exch server itself.

 

I assume you are using split DNS otherwise you must have the FQDN or OLK clients will receive prompts.