Hi All,

I want to buy Commercial SSL Certificate License for My Exchange Server Environment. 

My Exchange Enviroment is :

2 CAS Server (mail1.domain.com and mail2.domain.com) 

2 Mailbox Server (mbx1.domain.com and mbx2.domain.com)

I'm Using CAS Array for my 2 CAS Servers and DAG for my 2 Mailbox servers. 

I confuse how many SSL Certificate License should buy.

Regards

Rengga Patria

 

Hi ,

Please try to have the SAN certificate or wild card certificate for exchange.At minimum for exchange 2013 SAN certificate must have the following names.

mail.domain.com

autodiscover.domain.com

Note : If it is exchange 2013 there is no use and meaning of having an CAS array .

If it is exchange 2010 then you can create the cas array object to automatically populate the value for the rpc client access attribute in all the databases.Because of that all of us are saying the rpc client access array needs to be created first before creating the mailbox databases additionally Cas array object does not do any load balancing and also there is no need to have the cas array name on the SAN certificate.

Most importantly cas array name should not to be resolved on the external DNS.

Reference Link for cas array in exchange 2010 : 

http://blogs.technet.com/b/exchange/archive/2012/03/23/demystifying-the-cas-array-object-part-1.aspx

Do we need to Install SAN Certificate on all servers I mean CAS and mailbox servers ?

Hi ,

We need to install the SAN certificate on the CAS servers and there is no need to have it on mailbox servers.