Announcement

Collapse
No announcement yet.

SSL Certicate for exhcnage 2010

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • SSL Certicate for exhcnage 2010

    my AD domain name is A.com and am hosting email for two SMTP domains b.com c.com how many certificate i have to purchase this solution. to publish my owa and outlook anywhere what will be my owa address.

  • #2
    Re: SSL Certicate for exhcnage 2010

    One SAN (Subject Alternative Name) certificate with:

    mail.a.com
    autodiscover.a.com
    servername
    servername.domain.local

    OWA address will be mail.domain.com/owa

    Basically there is no need to have b.com or c.com on your certificate if users are happy accessing mail.a.com
    Tom Jones
    MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
    PhD, MSc, FIAP, MIITT
    IT Trainer / Consultant
    Ossian Ltd
    Scotland

    ** Remember to give credit where credit is due and leave reputation points where appropriate **

    Comment


    • #3
      Re: SSL Certicate for exhcnage 2010

      I would disagree.
      You need to cover autodiscover for the other domains. The simple way to do this is via autodiscover.example.com for each domain.

      Furthermore, if you use a split DNS system then you don't need to include the local names in the SSL certificate.

      Thus one list could be

      mail.example.com
      autodiscover.example.com
      autodiscover.example2.com
      autodiscover.example3.com

      Configure DNS so that mail.example.com resolves internally and adjust all URLs inside Exchange to use that host name as well.

      If you are likely to host lots of email domains (where users have the domain as their primary address) then use SRV records and just two host names.

      SImon.
      --
      Simon Butler
      Exchange MVP

      Blog: http://blog.sembee.co.uk/
      More Exchange Content: http://exchange.sembee.info/
      Exchange Resources List: http://exbpa.com/
      In the UK? Hire me: http://www.sembee.co.uk/

      Sembee is a registered trademark, used here with permission.

      Comment

      Working...
      X