Exchange Server Forums

RE: Exch07 and 03 coexistance

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Microsoft Exchange 2007] >> Migration >> RE: Exch07 and 03 coexistance

Page: << < prev 1 [2]

Message

<< Older Topic Newer Topic >>

Limited time MSExchange.org offer! -- 1.Sep.2008 1:00:00 PM

TechGenix and SolarWinds have partnered to provide free copies of SolarWinds Exchange Monitor to all visitors who join the MSExchange.org Forums. SolarWinds Exchange Monitor is a handy desktop dashboard that continuously monitors Microsoft Exchange to deliver real-time insight into Exchange services, mail queue sizes, and host server health. Learn more about Exchange Monitor and the free offer!

RE: Exch07 and 03 coexistance - 19.Feb.2008 3:58:56 PM

skipdog77

Posts: 35
Joined: 30.Sep.2003
From: Germantown, MD
Status: offline

Elan,

Thanks! And most of my clients will not have problems with Entrust? We have used Verisign forever. Verisign always works, and we never have to load root certs any where!

Skip

(in reply to Elan Shudnow)

Post #: 21

Featured Links*

RE: Exch07 and 03 coexistance - 19.Feb.2008 4:04:47 PM

Elan Shudnow

Posts: 550
Joined: 4.Jan.2007
From: Chicago, IL
Status: online

Well Verisign doesn't support UC Certs. Plus, Verisign just recently started using Intermediate Certificates. Most mobile devices don't have that intermediate certificate and mobile devices don't support certificate chaining like Internet Explorer. Certificate chaining means, if a device trusts the root certificate, it'll go fetch the intermediate certificate. Because mobile devices don't do this, you'll need to install that new intermediate certificate on your devices. There is a way to request Verisign to still sign your cert using their root, but I could never find it for the life of me. But it does't really matter anyways since they don't have UC Certificates.

I bet you still have an older Verisign cert that was signed with their root certificate authority server.

_____________________________

Elan Shudnow
http://www.shudnow.net

(in reply to skipdog77)

Post #: 22

RE: Exch07 and 03 coexistance - 19.Feb.2008 4:53:41 PM

skipdog77

Posts: 35
Joined: 30.Sep.2003
From: Germantown, MD
Status: offline

Elan,

Yes, it is probably 2.5 years old at this point.

So - Entrust will be supported "out of the box" by most devices correct (just making triple sure!!) or will we end up having to install the Entrust root cert (is it part of windows, etc)

Skip

(in reply to Elan Shudnow)

Post #: 23

RE: Exch07 and 03 coexistance - 19.Feb.2008 4:58:29 PM

Elan Shudnow

Posts: 550
Joined: 4.Jan.2007
From: Chicago, IL
Status: online

Entrust is a widely used CA. Most devices should trust Entrust out of the box. Key word is "should" but don't hold me to that. :)

< Message edited by Elan Shudnow -- 19.Feb.2008 5:04:04 PM >

_____________________________

Elan Shudnow
http://www.shudnow.net

(in reply to skipdog77)

Post #: 24

RE: Exch07 and 03 coexistance - 4.Mar.2008 7:31:23 AM

zebedee

Posts: 14
Joined: 12.Dec.2007
Status: offline

This is a really informative thread as we have an Exchange 2003 system which we are considering moving over to 2007 this summer. Currently we have two sets of OWA servers because we have two different domain names for OWA access. We need to continue to support both domain names, but if I am reading this correctly, we can introduce two Exchange client access server with a UC Cert hosting alternative names rather than having to have four servers (two each for redundancy). The timescales involved in getting the second domain in were very tight, hence just chucking it on another Exchange 2003 server rather than looking for alternative solutions.

(in reply to Elan Shudnow)

Post #: 25