Trusted Cert Woes on SBS 2008 [Small Business Server]

Prev: Exchange edge server to interface with SBS 2008?
Next: How to delete an UPDATE in Progress ALERT?

From: Bill Glidden on 30 Sep 2009 00:39

Les Connor [SBS MVP] wrote:
> ps, you can change remote.blah.blah to office.blah.blah in the SBS
> wizard by selecting the 'advanced' button. 'remote' is the default prefix.
>

Les, I did that and interestingly, it made one of the Security Alerts go
away. Still got one. Will multiple office.glidden.net.au GoDaddy certs
be a problem or is only one of these active?

From: Bill Glidden on 30 Sep 2009 01:00

Les Connor [SBS MVP] wrote:
> ps, you can change remote.blah.blah to office.blah.blah in the SBS
> wizard by selecting the 'advanced' button. 'remote' is the default prefix.
>
Oh, and Les, I can now see and select the Trusted cert in the Wizard. I
can also see the for GoDaddy certs that I installed during the saga. All
have type=unknown. AND no more Outlook Security nags.

Thanks for helping me sort this and pointing me in the general direction
of SBS Console, Advanced Mode!

Cheers,
Bill

From: Les Connor [SBS MVP] on 30 Sep 2009 10:31

Good stuff, Bill - glad you got it sorted.

Key is the name in the cert must match the url/site you're accessing. You
can get a cert for multiple sites but in this instance you only need
office.<domain.com>

--
-----------------------------------------------
Les Connor [SBS MVP]

"Bill Glidden" <bill(a)glidden.net.au> wrote in message
news:eggAprYQKHA.4004(a)TK2MSFTNGP04.phx.gbl...
> Les Connor [SBS MVP] wrote:
>> ps, you can change remote.blah.blah to office.blah.blah in the SBS wizard
>> by selecting the 'advanced' button. 'remote' is the default prefix.
>>
> Oh, and Les, I can now see and select the Trusted cert in the Wizard. I
> can also see the for GoDaddy certs that I installed during the saga. All
> have type=unknown. AND no more Outlook Security nags.
>
> Thanks for helping me sort this and pointing me in the general direction
> of SBS Console, Advanced Mode!
>
> Cheers,
> Bill

From: Ace Fekay [MCT] on 30 Sep 2009 16:40

"Bill Glidden" <bill(a)glidden.net.au> wrote in message
news:eggAprYQKHA.4004(a)TK2MSFTNGP04.phx.gbl...
> Les Connor [SBS MVP] wrote:
>> ps, you can change remote.blah.blah to office.blah.blah in the SBS wizard
>> by selecting the 'advanced' button. 'remote' is the default prefix.
>>
> Oh, and Les, I can now see and select the Trusted cert in the Wizard. I
> can also see the for GoDaddy certs that I installed during the saga. All
> have type=unknown. AND no more Outlook Security nags.
>
> Thanks for helping me sort this and pointing me in the general direction
> of SBS Console, Advanced Mode!
>
> Cheers,
> Bill

Les, with an Exchange UC/SAN certificate, you can add those names into one
cert. The one certificate will allow multiple names added into the
certificate in what's called a subjective alternate names list. Once you've
purchased, or have your current certs modified or combined into one
certificate by GoDaddy (Exchange can use a single cert with multiple names
and they should be able to combine all of them into one for you and pro-rate
the price), you can use the Exchange PowerShell Commands to add the services
the cert will be used for.

Read the following for more info. I also just added a step-by-step in the
blog, today, to illustrate how to request and import the new cert, as well
as how to enable the use of the cert for other services, such as IIS, SMTP,
IMAP, POP, etc. Enabling it for IIS will work for what you want, as long as
the names that you need, such as rww.domain.com, office.domain.com, or
whatever else you need, is in the certificate subject alternate names list.
The manual methods work with SBS 2008, too.

Exchange 2007 UC/SAN Certificate
http://msmvps.com/blogs/acefekay/archive/2009/08/23/exchange-2007-uc-san-certificate.aspx

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among
responding engineers, and to help others benefit from your resolution.

Ace Fekay, MCT, MCTS 2008, MCTS Exchange, MCSE, MCSA 2003 & 2000, MCSA
Messaging
Microsoft Certified Trainer

For urgent issues, please contact Microsoft PSS directly. Please check
http://support.microsoft.com for regional support phone numbers.

From: Ace Fekay [MCT] on 30 Sep 2009 16:41

First | Prev | Next | Last
Pages: 1 2 3 4
Prev: Exchange edge server to interface with SBS 2008?
Next: How to delete an UPDATE in Progress ALERT?