Self Signed Certificate
I think i may have figured this out but just wanted to verify with all you techs. Here's what is going on. I recently renewed our Exchange
Server certificate. By default, it gave me a CN=servername.local. If i access our OWA using the address https://mail.servername.com, i get a
page with the following info:
Certificate Error: Navigation Blocked
"The security certificate presented by this website was issued for a different website's address"
I am assuming that i need to re-create the certificate using SelfSSL with the correct CN=mail.servername.com. I would then need to bind this and add the cert to the trusted root authority.
Am i on the right track? Or did i miss anything?
March 30th, 2011 2:50pm
If you want to avoid errors you should use a commercial SSL certificate. When you can get these for less than $30/year for Exchange 2003 and $80/year for Exchange 2007 and higher, it becomes a false economy to use self signed certificates.
http://certificatesforexchange.com/
Even if you reissue the certificate you will still get an error because it isn't trusted.
Simon.Simon Butler, Exchange MVP
Blog |
Exchange Resources | In the UK?
Hire Me.
Free Windows Admin Tool Kit Click here and download it now
March 30th, 2011 7:11pm
Hi,
According to your way, the certificate is not a trusted root. Before the certificate expires, you should renew a self-signed certificate or use a
certificate signed by a trusted third-party. Because of the limitations of a self-signed certificate, Microsoft recommends that you replace the self-signed certificate with either a trusted third-party certificate or a certificate signed by a Windows PKI.
For more information, please refer to the article ‘Understanding the Self-Signed Certificate in Exchange 2007’:
http://technet.microsoft.com/en-us/library/bb851554(EXCHG.80).aspx
Hope this helps.
Thanks
Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
March 31st, 2011 11:38pm
Kindly check the autodiscover is there in ur certificate if it is not then you have to redirect the url with following the article below.
http://support.microsoft.com/kb/940726
Hope this helps.
Thanks
Viral R MCTS
Free Windows Admin Tool Kit Click here and download it now
April 1st, 2011 12:13am
Dear i am also agree with sembee that if you want to avoid errors you should use a commercial SSL Certificate. you can get SSL Certificate at cheap price starting with $9 from
http://www.sslmatrix.com so why use self signed certificate.
RapidSSL |
RapidSSL Certificate | Cheap SSL Certificates - SSL Reseller SSLMatrix.com serves you Low Cost SSL.
April 1st, 2011 5:38am
What service(s) would i need to enable for OWA and ActiveSync?
Free Windows Admin Tool Kit Click here and download it now
April 1st, 2011 7:49pm
On Fri, 1 Apr 2011 23:43:04 +0000, jh57 wrote:
>What service(s) would i need to enable for OWA and ActiveSync?
None. They're all running already.
---
Rich Matheisen
MCSE+I, Exchange MVP
--- Rich Matheisen MCSE+I, Exchange MVP
April 2nd, 2011 1:51pm