Hello! I have a single Exchange 2007 server (CAS + HUB + MB) in my environment. I bought a certificate from VeriSign. The only name that is contained in the certificate is www.mydomain.com, to publish the site of my company. No other subject name or SAN is configured in the certificate. For publishing OWA through SSL, I need to install a certificate on my Exchange server. I can publish OWA through SSL by installing the certificate I bought? Thanks!

On Mon, 17 Jan 2011 21:26:41 +0000, bbastos wrote: >Hello! I have a single Exchange 2007 server (CAS + HUB + MB) in my environment. I bought a certificate from VeriSign. The only name that is contained in the certificate is www.mydomain.com, to publish the site of my company. No other subject name or SAN is configured in the certificate. For publishing OWA through SSL, I need to install a certificate on my Exchange server. I can publish OWA through SSL by installing the certificate I bought? Thanks! No. --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP

Hello Rich, Why? Which SANs should I have in my certificate for the operation of external OWA and without impacting the access of internal clients? Thanks.

On Tue, 18 Jan 2011 23:47:11 +0000, bbastos wrote: >Why? You'll have one URL. How will you separate the traffic for the web site from the traffic for Exchange? >Which SANs should I have in my certificate for the operation of external OWA and without impacting the access of internal clients? http://www.digicert.com/ssl-support/exchange-2007-san-names.htm --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP

Hi bbastos, Rich gave some good suggestion, other information for you: http://technet.microsoft.com/en-us/library/bb851505(EXCHG.80).aspx Regards! GavinPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hello Gavin-Zhang, What do you think about the following solution? http://support.microsoft.com/kb/940726/en-us (Configure all the internal URLs for the Exchange virtual directories to www.mydomain.com and configure the internal DNS to resolve www.mydomain.com to internal IP of the CAS Server?). Thanks!

Hi bbastos, Sure, we could do that, but if we use outlookanywhere for external users, we need autodisover.domainname.com as a SAN in the certificate, and the autodiscover service URL will be either of below: https://<smtp-address-domain>/autodiscover/autodiscover.xml https://autodiscover.<smtp-address-domain>/autodiscover/autodiscover.xml Some information for you: http://technet.microsoft.com/en-us/library/bb332063(EXCHG.80).aspx Regards! GavinPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.