Exchange Server Forums

OWA SSL Certificate

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Microsoft Exchange 2007] >> Outlook Web Access >> OWA SSL Certificate

Page: [1]

Message

<< Older Topic Newer Topic >>

Limited time MSExchange.org offer! -- 1.Sep.2008 1:00:00 PM

TechGenix and SolarWinds have partnered to provide free copies of SolarWinds Exchange Monitor to all visitors who join the MSExchange.org Forums. SolarWinds Exchange Monitor is a handy desktop dashboard that continuously monitors Microsoft Exchange to deliver real-time insight into Exchange services, mail queue sizes, and host server health. Learn more about Exchange Monitor and the free offer!

OWA SSL Certificate - 14.Jul.2008 2:08:17 AM

RJMulligan

Posts: 17
Joined: 18.Feb.2003
From: Northern Ireand
Status: offline

I just up graded to Win 2k8 and exchange 2k7.

Everything went well, but when I applied my SSL certificte to the web site, now Outlook 2007 dispalys a SSL error.

SSL common name: www.xxxxxxx.xx.uk
Server: exchange.xxxxxxx.xx.uk

Any one any Idea's?

Robert

Post #: 1

Featured Links*

RE: OWA SSL Certificate - 14.Jul.2008 2:54:30 PM

Sembee

Posts: 3574
Joined: 17.Jan.2008
From: Somewhere near London, UK
Status: offline

How exactly did you apply the certificate to the web site? Did you import it in to Exchange? Have you changed the URLs in Exchange to match the SSL certificate?

It is very different to Exchange 2003 (which basically didn't care about the SSL certificate name). Now you have to ensure that all of the URLs are correct. Is it a SAN/UC certificate or a single name certificate?

Simon.

_____________________________

Simon Butler,
Exchange MVP
Blog: http://www.sembee.co.uk/
Web: http://www.amset.info/
In the UK? Hire me: http://www.amset.co.uk/

(in reply to RJMulligan)

Post #: 2

RE: OWA SSL Certificate - 15.Jul.2008 4:09:08 AM

RJMulligan

Posts: 17
Joined: 18.Feb.2003
From: Northern Ireand
Status: offline

I applied the SSL in IIS the same way that I did in 2003.

Regards
Robert

(in reply to Sembee)

Post #: 3

RE: OWA SSL Certificate - 15.Jul.2008 6:24:41 AM

Sembee

Posts: 3574
Joined: 17.Jan.2008
From: Somewhere near London, UK
Status: offline

Well that was wrong.
Best practise for Exchange 2007 is to use a SAN/UC certificate which supports multiple names. That certificate request is generated through the Shell and then when the response is generated that is also processed through the Shell.
Once you have imported the certificate you then have to change parts of Exchange to ensure that it works.

If you want to use an existing certificate that was used with Exchange 2003 then you can, but it requires some work. I have outlined what is required here: http://www.amset.info/exchange/singlenamessl.asp

If you cannot meet the specific requirements of that process though then you will need to purchase a new certificate. A suitable certificate can be picked up for US$60/year from places such as http://DomainsForExchange.net/

Simon.

_____________________________

Simon Butler,
Exchange MVP
Blog: http://www.sembee.co.uk/
Web: http://www.amset.info/
In the UK? Hire me: http://www.amset.co.uk/

(in reply to RJMulligan)

Post #: 4