I read a Microsoft article that stated "not to include individual server host names in your certificate subject alternative names". How will this impact internal encryption?

I am not sure what article you are referring to. It is not required to put the server hostnames as SANs in your certificate. It all depends on how you have configured CAS web services URLs. It will not hurt anything to have them in there.Tim Harrington | MVP: Exchange | MCITP: EMA 2007/2010, MCITP: Lync 2010, MCITP: Server 2008, MCTS: OCS | Blog: http://HowDoUC.blogspot.com | Twitter: @twharrington

Hi, As I know, "not to include individual server host names in your certificate subject alternative names" in order to reduce the number of host name so that you can save some money sometimes. It doesn't mean that it will impact your internal encryption. Thanks.Best Regards!

I am not sure what article you are referring to. It is not required to put the server hostnames as SANs in your certificate. It all depends on how you have configured CAS web services URLs. It will not hurt anything to have them in there.Tim Harrington | MVP: Exchange | MCITP: EMA 2007/2010, MCITP: Lync 2010, MCITP: Server 2008, MCTS: OCS | Blog: http://HowDoUC.blogspot.com | Twitter: @twharrington

Hi, As I know, "not to include individual server host names in your certificate subject alternative names" in order to reduce the number of host name so that you can save some money sometimes. It doesn't mean that it will impact your internal encryption. Thanks.Best Regards!

Hi , When you installed exchange 2010 By default Self signed certificate get installed on that server so It wont affect Internal Encryption. But if you are using Autodiscover Feature for Outlook 2007 or later clients , then you must mention autodiscover.yourdomainnem.com & Your Primary Url Name.

Hi Just like the above wrote, it's all about the URL's/URI's, those needs to be included and also the cas array name plus mail/webmail etc if that's used and don't forget the autodiscover name(s) Jonas Andersson | Microsoft Community Contributor Award 2011 | MCITP: EMA 2007/2010 | Blog: http://www.testlabs.se/blog | Follow me on twitter: jonand82

Hi Just like the above wrote, it's all about the URL's/URI's, those needs to be included and also the cas array name plus mail/webmail etc if that's used and don't forget the autodiscover name(s) Jonas Andersson | Microsoft Community Contributor Award 2011 | MCITP: EMA 2007/2010 | Blog: http://www.testlabs.se/blog | Follow me on twitter: jonand82