Exchange Server Forums

Which Certificate ?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Microsoft Exchange 2003] >> Server Security >> Which Certificate ?

Page: [1]

Message

<< Older Topic Newer Topic >>

Limited time MSExchange.org offer! -- 1.Sep.2008 1:00:00 PM

TechGenix and SolarWinds have partnered to provide free copies of SolarWinds Exchange Monitor to all visitors who join the MSExchange.org Forums. SolarWinds Exchange Monitor is a handy desktop dashboard that continuously monitors Microsoft Exchange to deliver real-time insight into Exchange services, mail queue sizes, and host server health. Learn more about Exchange Monitor and the free offer!

Which Certificate ? - 24.Oct.2008 2:53:28 PM

peppereyes

Posts: 19
Joined: 13.Oct.2005
Status: offline

i run exchange 2003 and i want all internal users on the network to be able to digital sign emails and i want users to be able to use the certificate when they use webmail. What certificate is the best one? one for the domain name or server?

any help would be great

thanks

Post #: 1

Featured Links*

RE: Which Certificate ? - 26.Oct.2008 6:58:02 PM

pjhutch

Posts: 3055
Joined: 21.Jul.2001
From: W Yorks, England
Status: offline

Neither you need user certificaters for this feature. You could use an internal CA for this if you want or find a inexpensive external trusted CA to dish out digital certs for users.

_____________________________

Peter Hutchison MCP
Exchange Administrator
University of Huddersfield

(in reply to peppereyes)

Post #: 2

RE: Which Certificate ? - 27.Oct.2008 3:20:16 AM

peppereyes

Posts: 19
Joined: 13.Oct.2005
Status: offline

thanks for the info :-) know any cheap cert suppliers.

(in reply to pjhutch)

Post #: 3

RE: Which Certificate ? - 27.Oct.2008 10:21:11 AM

Exchange_Geek

Posts: 1026
Joined: 31.Dec.2006
Status: offline

You may want to have a look at godaddy certs

(in reply to peppereyes)

Post #: 4

RE: Which Certificate ? - 27.Oct.2008 11:39:35 AM

Sembee

Posts: 3960
Joined: 17.Jan.2008
From: Somewhere near London, UK
Status: offline

Signing certificates are managed in a different way to the certificates for web sites.
For OWA you simply need a certificate from somewhere like GoDaddy. https://DomainsForExchange.net/

However to sign emails with a certificate you will need a different type of solution. You have to look at how you are going to manage the certificate because each user will need to have their own. You will either need to have your own CA which is exposed to the internet or use a commercial provider. Depending on how many users you have it may not be that cheap.

Simon.

_____________________________

Simon Butler,
Exchange MVP
Blog: http://www.sembee.co.uk/
Web: http://www.amset.info/
In the UK? Hire me: http://www.amset.co.uk/

(in reply to Exchange_Geek)

Post #: 5

RE: Which Certificate ? - 28.Oct.2008 11:28:56 AM

parry2k

Posts: 2
Joined: 12.Oct.2007
Status: offline

I have the similar situation. I have static ip address which i use to open owa. I install CA on the server and not sure how to create Certificate?

I gone thru some help and created the certificate with the name x.x.x.x/exchange and assigned to default web site. But unfortunately it is not working.

Anyhelp, how i can do it?

Thanks,
Parv

(in reply to Sembee)

Post #: 6

RE: Which Certificate ? - 28.Oct.2008 7:12:36 PM

Sembee

Posts: 3960
Joined: 17.Jan.2008
From: Somewhere near London, UK
Status: offline

Creating your own certificates for OWA isn't worth the hassle. You will always get a certificate prompt for external clients. Pay the money and purchase a commercial certificate. They are dirt cheap now from places like GoDaddy. http://DomainsForExchange.net/

Simon.

_____________________________

Simon Butler,
Exchange MVP
Blog: http://www.sembee.co.uk/
Web: http://www.amset.info/
In the UK? Hire me: http://www.amset.co.uk/

(in reply to parry2k)

Post #: 7