Exchange Server Forums

SSL Cert for SMTP in Exchange 2007

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Microsoft Exchange 2007] >> Secure Messaging >> SSL Cert for SMTP in Exchange 2007

Page: [1]

Message

<< Older Topic Newer Topic >>

Limited time MSExchange.org offer! -- 1.Sep.2008 1:00:00 PM

TechGenix and SolarWinds have partnered to provide free copies of SolarWinds Exchange Monitor to all visitors who join the MSExchange.org Forums. SolarWinds Exchange Monitor is a handy desktop dashboard that continuously monitors Microsoft Exchange to deliver real-time insight into Exchange services, mail queue sizes, and host server health. Learn more about Exchange Monitor and the free offer!

SSL Cert for SMTP in Exchange 2007 - 1.Feb.2008 8:57:09 PM

mjradik

Posts: 10
Joined: 1.Feb.2008
Status: offline

I have a wildcard SSL certificate issued by a trusted CA, which is in the format of *.domainname.com. I use it for OWA, and other web servers I�m running in my environment. I have this cert installed on the exchange server and works for OWA. I�m trying to get it to work for SMTP. I ran the following command.

New-ExchangeCertificate -DomainName *.domainname.com �Services SMTP

It gave the following warning:

WARNING: This certificate will not be used for external TLS connections with an
FQDN of 'servername.domainname.com' because the CA-signed certificate with
thumbprint '459047FF0993CE8828FA4DE665A54090D88672E1' takes precedence. The
following connectors match that FQDN: Default SERVERNAME, Client SERVERNAME

This shouldn�t matter because external connections user mail.domainname.com not servername.domainname.com correct? I�m just wondering if I did this correct and that it will work.

Thank You.

Post #: 1

Featured Links*

RE: SSL Cert for SMTP in Exchange 2007 - 11.Feb.2008 10:08:05 AM

Elan Shudnow

Posts: 576
Joined: 4.Jan.2007
From: Chicago, IL
Status: offline

You don't use -services while doing New-ExchangeCertificate. It's only after you do the New-ExchangeCertificate Import-ExchangeCertificate hat you Enable-ExchangeCertificate -services SMTP -Thumbprint thumbprinthere etc....

A wildcard cert in Exchange 2007 should be fine as long as you don't have any requirements for Exchange ActiveSync. Windows Mobile devices do not support wildcard certificates.

The following two articles will help you out:
http://msexchangeteam.com/archive/2007/02/19/435472.aspx
http://msexchangeteam.com/archive/2007/07/02/445698.aspx

(in reply to mjradik)

Post #: 2