Exchange Server Forums

Exchange Certificates

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Microsoft Exchange 2010] >> Secure Messaging >> Exchange Certificates

Page: [1]

Message

<< Older Topic Newer Topic >>

Exchange Certificates - 3.Oct.2011 6:04:58 PM

neel436

Posts: 11
Joined: 6.Jun.2011
Status: offline

Hi i have installed exchange certificate sucessfully. but in the domain names, i had just specified external DNS names. now when connecting from the outside, i can connect without any errors/warnings.
however, when connecting internally (LAN), i get certificate warnings, as the internal name of the server is not appearing in the certificate.
i am wondering what is the easiest solution to this.

Post #: 1

Featured Links*

RE: Exchange Certificates - 4.Oct.2011 9:56:07 AM

de.blackman

Posts: 3243
Joined: 4.Apr.2005
From: Toronto, Canada
Status: offline

Purchase another SAN certificate with the correct URLs on it and remember to include autodiscover.domain.com as one of the URLs

_____________________________

Ibrahim Benna - Microsoft Exchange MVP
Forum Moderator
Navantis

(in reply to neel436)

Post #: 2

RE: Exchange Certificates - 4.Oct.2011 6:03:36 PM

neel436

Posts: 11
Joined: 6.Jun.2011
Status: offline

hi Thanks for your post. i do have autodiscover in my certificate that i have bought, and it works well.
however, i have a problem with internal DNS. can i assign a certificate that is signed by my local CA to IIS for this. i assume that this would be a problem since i have already got a certificate asssigned to IIS from external CA.

(in reply to de.blackman)

Post #: 3

RE: Exchange Certificates - 5.Oct.2011 11:16:04 AM

de.blackman

Posts: 3243
Joined: 4.Apr.2005
From: Toronto, Canada
Status: offline

Unfortunately not! IIS web sites can only use one certificate. Make it easy for yourself (but a little more expensive) and just get a new certificate with the proper names on it.

_____________________________

Ibrahim Benna - Microsoft Exchange MVP
Forum Moderator
Navantis

(in reply to neel436)

Post #: 4

RE: Exchange Certificates - 5.Oct.2011 4:21:34 PM

neel436

Posts: 11
Joined: 6.Jun.2011
Status: offline

Sounds fair.

thanks for the advice mate.

(in reply to de.blackman)

Post #: 5

RE: Exchange Certificates - 12.Oct.2011 11:47:32 AM

peacedog13

Posts: 2
Joined: 24.Nov.2006
Status: offline

You could always configure split-dns to save the expense of another certificate.

The main drawback being that when DNS changes occur for outside accessible services/hosts, you'd need to make the same changes on the internal DNS server.

(in reply to neel436)

Post #: 6