Exchange Server Forums

Recommended way to distribute Certificates?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Microsoft Exchange 2003] >> Server Security >> Recommended way to distribute Certificates?

Page: [1]

Message

<< Older Topic Newer Topic >>

Recommended way to distribute Certificates? - 26.Jun.2008 10:05:36 AM

cobritek

Posts: 16
Joined: 7.May2008
Status: offline

I have set up a CA and distributed a Cert for OWA. I had to do some research afterwards because even after the certificate was installed for the mail.mydomain.com the website it would still tell the user there is a problem with the cert. I found that the user needs to install the root certificate of the CA to the client.

So my question is, what is the recommended way to distribute these certificates for OWA? I think there is an option in CA services to send the cert to a share but some of these users aren't on the internal network.

Post #: 1

Featured Links*

RE: Recommended way to distribute Certificates? - 30.Jun.2008 2:04:32 PM

Sembee

Posts: 3165
Joined: 17.Jan.2008
From: Somewhere near London, UK
Status: offline

Any reason you used your own CA for certificates?
It isn't something I tend to recommend for OWA unless you have control over 100% of the clients accessing OWA (which makes the feature pointless). You will always get certificate prompts when a client logs in to a new machine, which I see as a security risk. For OWA use a commercial SSL certificate. No prompts and less headache to deploy.

Simon.

_____________________________

Simon Butler,
Exchange MVP
Blog: http://www.sembee.co.uk/
Web: http://www.amset.info/
In the UK? Hire me: http://www.amset.co.uk/

(in reply to cobritek)

Post #: 2