Dear All, i want to publish my Exchange Server 2007 (All roles installed on single server) with TMG 2010, but i dont have a CA in my network, and i dont want to use any public CA. can you tell me how i will publish my exchange through TMG. Your Help will be highly appreciated.

Thanx Jonas Anderson for the reply, Actually for now only owa, may be in future i will use pop 3

There's a couple of 'dirty' non secure ways to do this, First,it's to do a SERVER publishing, instead of publish Exchange services, the other one is to configure your OWA to work as HTTP, and on TMG you can publish it without the need of the certificate. I hope this could help.Ibrahim Al Masry www.ibra.me

There's a couple of 'dirty' non secure ways to do this, First,it's to do a SERVER publishing, instead of publish Exchange services, the other one is to configure your OWA to work as HTTP, and on TMG you can publish it without the need of the certificate. I hope this could help.Ibrahim Al Masry www.ibra.me

Hi, Exchange server by default has a self-signed certificate installed for the services such as OWA, so you do not have to buy a public CA.Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. Thanks Gen Lin-MSFT

Like Gen Lin wrote, this is by default and it works, but you will be prompted every time you/your users access the OWA site If you should use Outlook Anywhere and ActiveSync I would suggest you to buy a cert from a trusted root provider Jonas Andersson MCTS: Microsoft Exchange Server 2007/2010 | MCITP: EMA 2007/2010 | MCSE/MCSA Blog: http://www.testlabs.se/blog

thanx for the guidance guys, can u tell me step by step how can i use exchange default certificate for its publishing with tmg.

For publishing Exchange 2010 services with TMG you can check my post at http://www.testlabs.se/blog/2010/07/27/how-to-publish-owaactivesyncoutlook-anywhere-exchange-2010-with-microsoft-forefront-tmg-2/ If you are referring to the self-signed cert, that needs to be imported into the trusted root container in mmc, add snapin (certificates, computer). And you also has to do that on your Exchange server But again, using self-signed certs will give you more work which also costs money, than going and buy one from godaddy, digicert etc. If it's a question about costs, it's better to deploy a CA into your organizationJonas Andersson MCTS: Microsoft Exchange Server 2007/2010 | MCITP: EMA 2007/2010 | MCSE/MCSA Blog: http://www.testlabs.se/blog

hi, you can't. Because -as far as I remember- you can't export the Exchange self signed certificate from the Exchange server. plz refer to my previous post for the workarounds.Ibrahim Al Masry http://www.ibra.me/

I think you have a point here Ibrahim, then he needs at least go for the CA or buy a 3rd part Jonas Andersson MCTS: Microsoft Exchange Server 2007/2010 | MCITP: EMA 2007/2010 | MCSE/MCSA Blog: http://www.testlabs.se/blog

hi, you can't. Because -as far as I remember- you can't export the Exchange self signed certificate from the Exchange server. plz refer to my previous post for the workarounds.Ibrahim Al Masry http://www.ibra.me/