Renew SSL Certificate
Hello All-- I am in the process of renewing my SSL UCC certificate and have ran into a problem. Our external domain is call xyz.com but our internal domain is called abc.int. The .int is causing an issue with our certificate vendor, they can not issue a certificate with a domain with the .int without an us owning that actual domain abc.int.. which we don't or can't. Our environment is as follow: Windows Server 2003 Native Mode Exchange 2007 SP1 I already read that renaming a domain is unsupported with exchange 2007. I have looked into the cross-domain migration but I don't want to go down that path unless until I am out of options. So here is an option I have thought of, let me know if this would work. Instead of have the FQDN name in the certificate just drop off the domain abc.int off and generate the certificate with only server name. For example: webmail.xyz.com cas1 cas2 autodiscover mail.xyz.com Does anyone know if this will work? Or any other ideas of other work arounds? Thanks for any help
October 20th, 2009 9:35pm

That will work fine. Just make sure the autodiscover is actually autodiscover.xyz.com. You'll need to make sure that you have that zone internally for clients to resolve and that you modify all your InternalURLs and AutodiscoverServiceInternalURI to contain the xyz.com namespace. For example: SCP for Autodiscover for internally domain joined users: Set-ClientAccessServer -Identity CASServer -AutoDiscoverServiceInternalUri https://CAS1/Autodiscover/Autodiscover.xml Instead of CAS1, you can use webmail.xyz.com if you prepare. You can see the remaining commands you'd use for other services at my website in the section "Configuring InternalURLs and ExternalURLs" at the following URL: http://www.shudnow.net/2008/11/18/autodiscover-dns-certificates-and-what-you-need-to-know/ MVP | MCSE:M | MCITP: Enterprise Messaging Administrator | MCTS: OCS + Voice Specialization | http://www.shudnow.net
Free Windows Admin Tool Kit Click here and download it now
October 21st, 2009 2:53am

Hi,Another good article will be helpful for you:Exchange and Certificateshttp://msexchangeteam.com/archive/2007/07/02/445698.aspxThanksAllen
October 23rd, 2009 6:39am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics