Announcement

Collapse
No announcement yet.

SSL Certificates for OWA

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • SSL Certificates for OWA

    Hi All,

    In our enviornment we purchased Verisign SSL certificates and recently renewed them for the next three years. we are using Exchange 2003 and ISA 2006.

    Now internally to access owa the link is http://exchangeservername/exchange and externally its https://owa.domainname.com/exchnage when access owa externally it always says 'continue to this website not recommended' and when I click on view certificates it says The certificate 'has expired and or not yet valid' and the expiry date is when certificates expired few months ago.

    Having said that if I access the owa link from ISA server it does work fine but out side its not,

    Could any one please advise if I do need to update any thing in ISA server or in the firewall?

    Your advise would be highly appreciated.

    Thanks
    Sam

  • #2
    Re: SSL Certificates for OWA

    Check the web listener properties in ISA Server and make sure that you have the new certificate selected as the one to use. It'll be easy to tell, ISA will show you a red circle with a white X for expired/invalid certificates and a green tick for valid ones.
    BSc, MCSA: Server 2008, MCSE, MCSA: Messaging, MCTS
    sigpic
    Cruachan's Blog

    Comment


    • #3
      Re: SSL Certificates for OWA

      Thanks for quick response,

      Apologies I am not good in ISA: I have captured the snapshot and its showing exactly what you mention? could you please confirm and its picking up the expired certificates, could you please advise how can I point this to the new certificates?

      PS: snapshot is attached.
      Attached Files

      Comment


      • #4
        Re: SSL Certificates for OWA

        you need to upload the certificate to the isa server, and install it into the Certificate Store same as you would on the IIS server.

        then, where you have select certificate, you should be able to select the new certificate.

        but until it's added to the store, you can't select it.
        Please do show your appreciation to those who assist you by leaving Rep Point https://www.petri.com/forums/core/im.../icon_beer.gif

        Comment


        • #5
          Re: SSL Certificates for OWA

          In addition to what tehcamel said, you MUST export the private key with the certificate for installation on ISA. The Web Listener will show the certificate as invalid if the corresponding private key is not in the certificate store.
          BSc, MCSA: Server 2008, MCSE, MCSA: Messaging, MCTS
          sigpic
          Cruachan's Blog

          Comment


          • #6
            Re: SSL Certificates for OWA

            Tanks all,

            It has fixes the issue; for export/import the new SSL certificates I followed the below link:

            http://www.isaserver.org/articles/exportsslcert.html

            Thanks for all the support.

            Comment

            Working...
            X