We have a forest (fng.local) that has one child domain (fng.com) that everything lives in...exchange, users, member servers etc., we also have a domain name (not AD) of fngservices.com (this is where all mx records are, and basically anything that faces the internet lives). We installed Exchange 2007 in child domain fng.com, and went to purchase a ucc cert but were denied because we do not own the child domain (fng.com). The UCC cert had the following names in the csr: fngervices.com, fng.com, fngex2k7, fngex2k7.fng.com, autodiscover.fngservices.com. What is the easiest way to work though this issue? I know a rename is not possible. Should I be creating a new child domain in the fng.local forest, deploy a new exchange server there, and migrate everything to the new exchnage server? **It is probably worth noting that Exchange is in co-existence or "Interop" mode presently.....** Any help is much appreciated!

I have succesfully in the past purchased a single name certificate from an outside third party. In your case this would be webmail.fngservices.com (or whatever you want your OWA server name to be). You can then reconfigure OWA, Autodiscover, and all the other web based services to use that one name: http://support.microsoft.com/kb/940726 That allows you to leave the other ceritificate in place for server to server communicaiton (assuming you have other Exchange 2007 servers), but all web services will respond to the one name. I hope that helps.