Help with SSL, IIS7 and host
Hi,I succesfully installed Server 2008 RC1 and Exchange 2007.I can use OWA without any problems.The problem is that I can't get my pushmail activated.I get errors with the ssl certificate and I know where the problem is.If I look at the "issued to", I see this name: server.domain.local (this is my full domain name and server is the computername)So the issued to is not the same as the real url.This is the problem why I cannot sync. If I create a self signed certificate, I still have this server.domain.localCan someone help me with this?Thanks and regards,Michael
January 16th, 2008 2:36am
On certificates
What you need is a Subject Alternative Name (SAN) SSL Certificate from a trusted publisher.
Some publishers use another name for this type of certificate and would name it a Unified Communications SSL Certificate.
In the certificate request you can use the following (DNS) names:
NETBIOSNAME of the server on your internal network (for example: SERVER)
Internal DNS name of the server (for example: server.domain.local)
External DNS name of the server for webmail and activeSync usage (for example: webmail.externaldomainname.com)
External DNS name of the server for AutoDiscovery (for example: Autodiscover.externaldomainname.com)
The usage of wildcard SSL certificates is discouraged since Windows Mobile 5 do not support them.
Henrik Walther has a perfect write-up. Digicert has an excellent tool to write the Powershell command for creating the Certificate request. (you're not obliged to buy with them, they're expensive)
On IIS configuration
Exchange Server 2007 installs with its own issued certificate by default to secure Outlook Web Access out of the box. You need to configure IIS to ditch this certificate and use the certificate you requested from a truster publisher.
Free Windows Admin Tool Kit Click here and download it now
January 16th, 2008 10:03am
Thanks for your help.Just ordered an UCC certificate at Godaddy. Just $ 60,- a year. Thanks again!
January 16th, 2008 3:49pm
Hi Sander,let say if you can only have to choose 3, then which name should you put into your certificate so that the Exchange Activesynch and Outlook Autodiscover works ?1. domain.com2. autodiscover.domain.com3. servername.domain.com4. owa.domain.comI'm still in the middle of confusion of which name should I take.Thanks
Free Windows Admin Tool Kit Click here and download it now
May 9th, 2008 5:54pm


