Exchange 2010 Certificate issue - wrong one geing used for Outlook clients
Hello,
I just installed an Exchange 2010 server, installed SP1 and then installed our SSL cert for Outlook web. That same cert is being used by the internal client and throws an error as the domain and host name are not the same.
internal is company.local and external it is comany.com
How do I configure Exchange to not use the company.com Cert for our Outlook clients?
I've tried changing settings in Server config -> Exchange Certs and selecting only IIS for the company.com cert and all else for the company.local cert.
Any thoughts?
Thanks
April 14th, 2011 10:40pm
You can't have multiple certificates.
You need to purchase a different kind of certificate - known as a Unified Messaging or Subject Alternative Name certificate. This will include the additional names that Exchange needs to operate:
host.example.com (common name)
autodiscover.example.com
server (server NETBIOS name)
server.example.local (server FQDN).
While it is possible to use a regular single name SSL certificate, if you are using Outlook Anywhere then your external DNS provider MUST support SRV records and you will need to setup a split DNS system so that the external name resolves internally to the
Exchange server.
What you have done about changing the SSL certificate with the roles will not work because Outlook 2007 and higher makes IIS calls to Exchange for internal autodiscover, OAB and availability, and that means the same certificate is being used as for external
traffic.
Simon.Simon Butler, Exchange MVP
Blog |
Exchange Resources | In the UK?
Hire Me.
Free Windows Admin Tool Kit Click here and download it now
April 15th, 2011 3:15pm
Thank you for the reply, would the SSL Cert be called a Multipule Domain Cert(UCC)? I'm trying to find the right Cert on Godaddys site.
__
Nevermind, that is the correct cert, I have it installed and am good to go.
Thanks again.
April 15th, 2011 8:19pm
UCC - Unified Communications Certificate.
Simon.Simon Butler, Exchange MVP
Blog |
Exchange Resources | In the UK?
Hire Me.
Free Windows Admin Tool Kit Click here and download it now
April 15th, 2011 9:59pm