Exchange Server Forums

Exchange 2007 SAN Certificate

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Microsoft Exchange 2007] >> Outlook Web Access >> Exchange 2007 SAN Certificate

Page: [1]

Message

<< Older Topic Newer Topic >>

Exchange 2007 SAN Certificate - 9.Mar.2010 1:18:46 PM

andreil

Posts: 5
Joined: 9.Mar.2010
Status: offline

Hello,
I have to create an Exchange 2007 SAN certificate for the company I work for and I need some advice from you.
My servers are:
TESTHC1 and TESTHC2 (both Hub and CAS roles on every server) in load balancing - Windows2008 Std and Exchange2007 Std.
Network load balancing name is TESTNLB
TESTMBX1 and TESTMBX2 (Mailbox role) in CCR - Windows2008 Ent. and Exchange2007 Ent.
The Windows failover cluster name is TESTCCR, and the Exchange Clustered Mailbox Server is EXCHANGE
The internal domain is test.com (like computername.test.com), my email address is user@test.ro and the outside domain for OWA 2007 is Something.ro.
https://mail.something.ro/owa/
Right now I`m moving mailboxes from Exchange 2003 to Exchange 2007 and the name mail.test.ro is already used by another server.
I am intending to use DigiCert's SAN certificate and there is no room for errors when I`ll generate the request. I`ve already made an internal certificate, free, it`s working from outside but I need a confirmation from you. This is what I am using now in my temporary certificate used for testing:

Common name:
Mail.something.ro
Subject alternative name:
DNS Name=TESTNLB
DNS Name=TESTNLB.test.com
DNS Name=TESTHC1
DNS Name=TESTHC1.test.com
DNS Name=TESTHC2
DNS Name=TESTHC2.test.com
DNS Name=test.com
DNS Name=autodiscover.test.com
DNS Name=something.ro
DNS Name=autodiscover.something.ro
DNS Name=mail.something.ro

Is this correct, too many names? The key size should be 1024 or 2048? If I`ll use 2048 it will slow down the speed when accesing OWA?
Please advice.

Regards,

Andrei

Post #: 1

Featured Links*

RE: Exchange 2007 SAN Certificate - 9.Mar.2010 1:28:49 PM

glenknight

Posts: 65
Joined: 15.Jan.2010
Status: offline

That all looks OK.

I can recommend http://www.exchangecertificates.com for reasonably priced SAN/UCC certificates

_____________________________

Glen Knight
http://demazter.wordpress.com
http://www.demazter.co.uk

(in reply to andreil)

Post #: 2

RE: Exchange 2007 SAN Certificate - 9.Mar.2010 1:29:59 PM

glenknight

Posts: 65
Joined: 15.Jan.2010
Status: offline

Also I have never noticed a performance hit with the different key sizes

_____________________________

Glen Knight
http://demazter.wordpress.com
http://www.demazter.co.uk

(in reply to andreil)

Post #: 3