Hi

My Exchange enviroment consist with two exchange 2010 servers: Edge Server and Mailbox server. I use internal domain corp.domain1.pl and external domain domain2.pl (specially for e-mails). Edge server name is: edge.corp.domain1.pl and mailoboxserver is mailbox.corp.domain1.pl (mail.domain2.pl from internet). User connetct to Pop3, OWA, by mail.domain2.pl DNS address and the main e-mail address is xxx@domain2.pl.

So for that enviroment should I buy two certificates for edge and mailbox server or only one for mailbox server?

How do I create request certificates?

For Edge:

New-ExchangeCertificate -GenerateReques -SubjectName "c=PL, o=company, cn=mail.domain2.pl" -DomainName mail.domain2.pl,edge.corp.domain1.pl -PrivateKeyExportable $true

Is it correct request for Edge server certificate?

For mailboxserver should I create request certificate using Wizard and mark "Use mutual TLS to help secure Internet mail" and "Use Hub Transport server for POP/IMAP client submission"?

Thank you very much for help

Hi Tomasz,

A certificate can help secure many paths of e-mail communication. It is used to encrypt or authenticate sessions while communications. And not only edge server needs certificates, there are more certificates need to support services between different servers.

In the following links, more helpful information could help you to solve the problem:

  1. Exchange 2007 Components That Use Certificates To Encrypt or Authenticate Sessions in

      http://technet.microsoft.com/en-us/library/bb851505(v=exchg.80).aspx

  2. Certificate Requirements by Service in

      http://technet.microsoft.com/en-us/library/dd351044%28v=exchg.141%29.aspx?lc=1033

  3. Certificate with real world scenario in

      http://blogs.technet.com/b/exchange/archive/2007/07/02/3403301.aspx

Hope it can help you. If there are any questions or concerns, please post here and I would like to help you to solve it.

Best regards