Comments on: Configure an SSL Certificate for Exchange Server 2010

By: dan

dan — Mon, 06 Feb 2012 10:03:35 +0000

I uninstalled and reinstalled the certificate on the 2nd server and everything looks fine now. I am able to access OWA without any issues.

Thanks Paul

By: Paul Cunningham

Paul Cunningham — Sun, 05 Feb 2012 22:35:18 +0000

Yes you can use a mix of certificates issued by private and public CAs.

Use the privately issued certs on your internal servers, including the external name on the internet-facing CA servers as well.

Then request a separate cert from the public CA for the external name(s) and bind that cert to your ISA Server listener.

By: John McGraw

John McGraw — Sun, 05 Feb 2012 22:30:18 +0000

Paul –

Are there any comments you can provide on my situation? Greatly appreciated.

Thanks.

John

By: Paul Cunningham

Paul Cunningham — Sun, 05 Feb 2012 22:19:21 +0000

I’d just unassign the certificate that you don’t want to use from SMTP.

By: Paul Cunningham

Paul Cunningham — Sun, 05 Feb 2012 21:56:47 +0000

Is your browser blocking popups?

By: dan

dan — Sun, 05 Feb 2012 19:10:42 +0000

In OWA 2010 after logging when I click on the New Button or any other buttons nothing happens. Unable to create reply or delete any messages. However, if I access OWA directly from server everything works fine.
Any idea what it fails in OWA?

Thanks in Advance

Dan

By: dan

dan — Sun, 05 Feb 2012 19:05:19 +0000

Hi Paul,

Recently I installed a SAN certificate on my exchange server. On 1st eveything went fine, but on second server when I enabled the exchange certificate it gave me the below error

This certificate will not be used for external TLS connections with an FQDN of ‘mail1.X.X.COM’ because the self-signed certificate with thumbprint ‘AAA-THUMBPRINT-AAAAAAA’ takes precedence.

Now on second server I see a red mark on the certificate

I have all the names external and internal on the SA certificate.

Please could you let me know if this would create any problems on my exchange servers

By: safwan

safwan — Sun, 29 Jan 2012 11:23:29 +0000

Dear

I am create two dertificate in CAS and i need to remove please can help me to provide the step…

By: Joman

Joman — Wed, 04 Jan 2012 15:12:22 +0000

why email are being queued on exchange server 2003 sending to exchange 2010?

By: John

John — Fri, 23 Dec 2011 16:23:42 +0000

Paul –

I have a strange predicament, I have inherited a domain with an internal name ending with .gov. External name is slightly different due to restrictions. Want to create a SAN with internal and external domain names as required, but cert authority informs I need to register my internal name as it is an external designation. Problem is the governing board for .gov names will not allow us to register it as it is not the format they allow – even thought it is for our internal use. Our AD is 2008R2 but too large for a domain rename (the thought makes me shutter) besides I think Exchange is one of the apps that is not compatible with it. My question is – can I have two cetificates assigned to my CAS array, The Commercial SSL for external users and an internal self signed certificate for my internal clients? Will Outlook autoconnect work properly?

Thanks in advance.

John