Certificate questions (server names and IMAP)
I'm trying to understand how I can use one certificate for two servers. Here's the environment (Exchange 2010).
I have two sites and each site has one CAS/HT/MBX server. Since both sites will be active. I'll have users at site1 connect to mail.company.com and users at site2 connect to mail2.company.com. Both DNS names will be used internally and externally.
I ran the new cert request wizard on my Exchange server in site1 (command below) and I noticed that the New-ExchangeCertificate command included the switch "-Server 'exCHM1'." What is that switch for? How would I add exCHM2 (-Server 'exCHM1','exCHM2' doesn't
work).
Also, I'd like to let users access their mailboxes over IMAP both internally and externally. Today they hit serverName.company.com. In the wizard, IMAP can be checked under both CAS and HT. Which one should I use?
Here is the command that the cert wizard generated:
New-ExchangeCertificate -FriendlyName 'E2010' -GenerateRequest -PrivateKeyExportable $true -KeySize '2048' -SubjectName 'C=US,S="CO",L="City",O="Company",OU="Technical Operations",CN=company.com' -DomainName 'mail.company.com','kcmail.company.com','company.com','autodiscover.company.com','exCHM1.company.com ','legacy.company.com' -Server 'exCHM1'
Thanks.
November 4th, 2011 9:39am
If you look at the cmdlet documentation, you will see that the -Server
parameter "specifies the server name for which you want to create the new certificate. If not specified, the certificate or certificate request is generated for the Exchange server on which the command is executed."
Just add exCHM2 to the -DomainName list and run the command from the EMS!http://LetsExchange.blogspot.com
Free Windows Admin Tool Kit Click here and download it now
November 5th, 2011 10:29pm
Hi Mhashemi,
Above gave some good information, any udpate for your issue?
Regards!
Gavin
TechNet Subscriber Support
in forum
If you have any feedback on our support, please contact
tngfb@microsoft.com
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if
a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
November 7th, 2011 3:19am
Hi Mhashemi,
Above gave some good information, any udpate for your issue?
Regards!
Gavin
TechNet Subscriber Support
in forum
If you have any feedback on our support, please contact
tngfb@microsoft.com
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if
a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
November 7th, 2011 3:19am
We're waiting on the cert request to be processed.
November 7th, 2011 5:01pm
We're waiting on the cert request to be processed.
Free Windows Admin Tool Kit Click here and download it now
November 7th, 2011 5:01pm
Hi Mhashemi,
Any update for your issue?
Regards!
Gavin
TechNet Subscriber Support
in forum
If you have any feedback on our support, please contacttngfb@microsoft.com
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your
question. This can be beneficial to other community members reading the thread.
November 27th, 2011 10:09pm
Hi Mhashemi,
Any update for your issue?
Regards!
Gavin
TechNet Subscriber Support
in forum
If you have any feedback on our support, please contacttngfb@microsoft.com
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your
question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
November 27th, 2011 10:09pm
Hi,
You can create csr request by using this simple tool......... Cheers
https://www.digicert.com/easy-csr/exchange2010.htm
SushantRegards Sushantgharpure
December 23rd, 2011 6:10am