• RSS
  • Twitter
  • FaceBook

Exchange Server Forums

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Exchange Certificates

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [Microsoft Exchange 2010] >> Secure Messaging >> Exchange Certificates Page: [1]
Login
Message << Older Topic   Newer Topic >>
Exchange Certificates - 3.Oct.2011 6:04:58 PM   
neel436

 

Posts: 11
Joined: 6.Jun.2011
Status: offline
Hi i have installed exchange certificate sucessfully. but in the domain names, i had just specified external DNS names. now when connecting from the outside, i can connect without any errors/warnings.
however, when connecting internally (LAN), i get certificate warnings, as the internal name of the server is not appearing in the certificate.
i am wondering what is the easiest solution to this.
Post #: 1
RE: Exchange Certificates - 4.Oct.2011 9:56:07 AM   
de.blackman

 

Posts: 3542
Joined: 4.Apr.2005
From: Toronto, Canada
Status: offline
Purchase another SAN certificate with the correct URLs on it and remember to include autodiscover.domain.com as one of the URLs

_____________________________

Ibrahim Benna - Microsoft Exchange MVP
Forum Moderator
Navantis
@IbrahimBenna

(in reply to neel436)
Post #: 2
RE: Exchange Certificates - 4.Oct.2011 6:03:36 PM   
neel436

 

Posts: 11
Joined: 6.Jun.2011
Status: offline
hi Thanks for your post. i do have autodiscover in my certificate that i have bought, and it works well.
however, i have a problem with internal DNS. can i assign a certificate that is signed by my local CA to IIS for this. i assume that this would be a problem since i have already got a certificate asssigned to IIS from external CA.

(in reply to de.blackman)
Post #: 3
RE: Exchange Certificates - 5.Oct.2011 11:16:04 AM   
de.blackman

 

Posts: 3542
Joined: 4.Apr.2005
From: Toronto, Canada
Status: offline
Unfortunately not! IIS web sites can only use one certificate. Make it easy for yourself (but a little more expensive) and just get a new certificate with the proper names on it.

_____________________________

Ibrahim Benna - Microsoft Exchange MVP
Forum Moderator
Navantis
@IbrahimBenna

(in reply to neel436)
Post #: 4
RE: Exchange Certificates - 5.Oct.2011 4:21:34 PM   
neel436

 

Posts: 11
Joined: 6.Jun.2011
Status: offline
Sounds fair.

thanks for the advice mate.

(in reply to de.blackman)
Post #: 5
RE: Exchange Certificates - 12.Oct.2011 11:47:32 AM   
peacedog13

 

Posts: 3
Joined: 24.Nov.2006
Status: offline
You could always configure split-dns to save the expense of another certificate. 

The main drawback being that when DNS changes occur for outside accessible services/hosts, you'd need to make the same changes on the internal DNS server.

(in reply to neel436)
Post #: 6

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [Microsoft Exchange 2010] >> Secure Messaging >> Exchange Certificates Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts


Follow TechGenix on Twitter