Announcement

Collapse
No announcement yet.

Commercial SSL Cert.

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Commercial SSL Cert.

    Hi all

    As I am getting a commercial SSL certificate, we probably might have 2 or 3 domains say domainA.com, domainB.com, and one of SSL provider said that : "If you intend to secure OWA.domaina.com, OWA.domainb.com, EAS,domaina.com, EAS.domainb.com, etc, you will need more than just a 5 domain UCC. Each subdomain you secure will count as 1 domain used on your UCC. If you have 5 subdomains for each domain name you will need a 10 domain UCC certificate" please someone clarify this.
    So if we have say 2 domains and we want to get OWA, EAS, Outlook Anywhere, Autodiscover etc for both domains. We need to buy a multiple domain UCC with 10 domains. Is it correct? Thanks in advance

    Cheers

  • #2
    Re: Commercial SSL Cert.

    Unless you can set SRV records for all of the domains (which many DNS providers do not) you will need at least the OWA record and the autodiscover record.

    MX records ideally should use the same name for all domains - and it is that name that I recommend is the common name (ie the primary certificate name) that is on the certificate.

    Also note that if you are using Outlook Anywhere, then there can be issues if you are using a name for the host that is NOT the primary name on the certificate.

    Simon.
    --
    Simon Butler
    Exchange MVP

    Blog: http://blog.sembee.co.uk/
    More Exchange Content: http://exchange.sembee.info/
    Exchange Resources List: http://exbpa.com/
    In the UK? Hire me: http://www.sembee.co.uk/

    Sembee is a registered trademark, used here with permission.

    Comment


    • #3
      Re: Commercial SSL Cert.

      Originally posted by Sembee View Post
      Unless you can set SRV records for all of the domains (which many DNS providers do not) you will need at least the OWA record and the autodiscover record.

      MX records ideally should use the same name for all domains - and it is that name that I recommend is the common name (ie the primary certificate name) that is on the certificate.

      Also note that if you are using Outlook Anywhere, then there can be issues if you are using a name for the host that is NOT the primary name on the certificate.

      Simon.
      Thank you Simon.

      For now, I would go ahead to buy a Multiple domain with 5 domain for one domain first. I guess it should be good enough to cover what I need, right?
      what do I need to know prior order online? thanks a lot

      Cheers

      Comment


      • #4
        Re: Commercial SSL Cert.

        I have blogged the entire process here:
        http://www.sembee.co.uk/archive/2008/05/30/78.aspx

        Simon.
        --
        Simon Butler
        Exchange MVP

        Blog: http://blog.sembee.co.uk/
        More Exchange Content: http://exchange.sembee.info/
        Exchange Resources List: http://exbpa.com/
        In the UK? Hire me: http://www.sembee.co.uk/

        Sembee is a registered trademark, used here with permission.

        Comment


        • #5
          Re: Commercial SSL Cert.

          Originally posted by Sembee View Post
          I have blogged the entire process here:
          http://www.sembee.co.uk/archive/2008/05/30/78.aspx

          Simon.
          Hi Simon

          I just finished reading your blog i.e. very helpful, thanks a lot for this blog
          However, I did not see any thing in your blog related to EAS, As I have read somewhere without an SSL cert. it won't work, is it correct?

          Cheers

          Comment


          • #6
            Re: Commercial SSL Cert.

            What were you expecting regarding EAS?
            You cannot use the self generated certificate with EAS, that isn't supported.
            While you can use EAS without SSL, it is not recommended as it means that your username and password is sent across in the clear.

            Once the certificate is enabled for IIS, it is used for all web based services - so OWA, Outlook Anywhere, EAS etc.

            Simon.
            --
            Simon Butler
            Exchange MVP

            Blog: http://blog.sembee.co.uk/
            More Exchange Content: http://exchange.sembee.info/
            Exchange Resources List: http://exbpa.com/
            In the UK? Hire me: http://www.sembee.co.uk/

            Sembee is a registered trademark, used here with permission.

            Comment


            • #7
              Re: Commercial SSL Cert.

              Originally posted by Sembee View Post

              Once the certificate is enabled for IIS, it is used for all web based services - so OWA, Outlook Anywhere, EAS etc.

              Simon.
              That is exatly what I'd like to know. You are a legend.

              Cheers

              Comment


              • #8
                Re: Commercial SSL Cert.

                Hi Simon and all

                It is time for me to purchase an SSL.
                I am on the fence between GoDaddy.com and CertificatesForExchange.com.
                I am wondering the cert for exchange is as good as goddady in terms of service, support and secure. To me they look the same .
                Has anoyone purchased from Cert for exchange?

                Happy New Year to all

                Cheers

                Comment


                • #9
                  Re: Commercial SSL Cert.

                  They are the same thing. Just one is a branded site, the other is GoDaddy's generic site.
                  Identical certificates, same support etc. I believe there is a price difference though.

                  Simon.
                  --
                  Simon Butler
                  Exchange MVP

                  Blog: http://blog.sembee.co.uk/
                  More Exchange Content: http://exchange.sembee.info/
                  Exchange Resources List: http://exbpa.com/
                  In the UK? Hire me: http://www.sembee.co.uk/

                  Sembee is a registered trademark, used here with permission.

                  Comment


                  • #10
                    Re: Commercial SSL Cert.

                    Originally posted by Sembee View Post
                    They are the same thing. Just one is a branded site, the other is GoDaddy's generic site.
                    Identical certificates, same support etc. I believe there is a price difference though.

                    Simon.
                    Thanks a lot Simon. I know what to do now.

                    Happy New Year.

                    Cheers

                    Comment

                    Working...
                    X