Announcement

Collapse
No announcement yet.

SSL certificate?

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • SSL certificate?

    Dear All,
    I have install 3 servers (Mail, Domain & Firewall).
    Mail 192.168.1.3 windows2008
    Domain 192.168.1.2 windows2008
    Firewall 192.168.1.1 windows2003 with ISA 2006

    But I am still not understanding to install certificate yet. So,
    1). To which serever should i install SSL Certificate? mail or firewall

    Lasantha

  • #2
    Re: SSL certificate?

    I assume you want to publish OWA etc?

    There are a few different setups but you could install the same certificate on the Exchange 2007 box and also on ISA. That way you encrypt traffic between the client and ISA and ISA to the Exchange. ISA has a wizard for the publishing rule so that should be straight forward. In Exchange use the "import-exchangecertificate" cmdlet.
    cheers
    Andy

    Please read this before you post:


    Quis custodiet ipsos custodes?

    Comment


    • #3
      Re: SSL certificate?

      Thanks you for reply,
      I created a SSL certificated on Mail Server. I could able to export. But, after i import it to firewall server (ISA 2006) through MMC, and when i trying to select Certificate on Listener , it is saying "invalid Cerificate". but when i double click certificate on MMC, its trusted.

      any idea?

      lasantha

      Comment


      • #4
        Re: SSL certificate?

        And did you exported it with or without the private key.
        For ISA publishing using bridge mode (default) ISA also needs the private key.
        Marcel
        Technical Consultant
        Netherlands
        http://www.phetios.com
        http://blog.nessus.nl

        MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
        "No matter how secure, there is always the human factor."

        "Enjoy life today, tomorrow may never come."
        "If you're going through hell, keep going. ~Winston Churchill"

        Comment


        • #5
          Re: SSL certificate?

          Yes, I have export it with private key. once i import it to firewall server (on mmc), and after i double click certificate, i can saw that its trusted.
          But my mail server is exchange 2007 with win 2008. But firewall server is win 2003. is that making problem?

          Thanks Lots

          Comment


          • #6
            Re: SSL certificate?

            And how and where did you imported it?
            Have you imported it to the local machine store?
            Marcel
            Technical Consultant
            Netherlands
            http://www.phetios.com
            http://blog.nessus.nl

            MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
            "No matter how secure, there is always the human factor."

            "Enjoy life today, tomorrow may never come."
            "If you're going through hell, keep going. ~Winston Churchill"

            Comment


            • #7
              Re: SSL certificate?

              Thanks you. I have manage it using Self-SSL. But I am getting only one year SSL. Is that possible to change it?

              Also I am getting deference problem with OWA. I can open OWA internally & Externally. But I can logging to OWA externally, its taking long time and saying,

              "You could not be logged on to ISA server. Make sure that your domain name, user name, and password are correct, and try again."


              But Internally is ok


              Thanks lots
              Last edited by Lasanthajn; 26th August 2008, 12:24.

              Comment

              Working...
              X