newbie question - installing certificates

Bill · Joined: 22 Jan 2008 Posts: 5

Hi there,
new to Exchange 2007 (w2k3 server, r2, sp2)
we use https://ourmail-url/owa for Outlook Web Access, which works fine
as long as you say YES to the Security Alert that pops up. I have not
installed any certificates. We have a mobile user with a phone (I'll
get the specs) that can't sync, and I'm assuming its because we haven't
installed a certificate.

so...my questions are,
1) what is the best option for purchasing a certificate
2) I've seen free ones, do they work or not

thanks,
Bill

Archived from group: microsoft>public>exchange>mobility

John Oliver, Jr. [MVP] · Joined: 05 Aug 2007 Posts: 823

If you are running Exchange 2007 then I would suggest a Unified Messaging
Certificate. As you will find out they are not cheap but Go Daddy seems the
most cost effective, a multiple year UCC will run you about $59 for up to 5
domains.

https://www.godaddy.com/gdshop/ssl/ssl.asp?ci=9039

--
John Oliver, Jr
MCSE, MCT, CCNA
Exchange MVP 2008
Microsoft Certified Partner

"Bill" wrote in message @TK2MSFTNGP02.phx.gbl...
> Hi there,
> new to Exchange 2007 (w2k3 server, r2, sp2)
> we use https://ourmail-url/owa for Outlook Web Access, which works fine as
> long as you say YES to the Security Alert that pops up. I have not
> installed any certificates. We have a mobile user with a phone (I'll get
> the specs) that can't sync, and I'm assuming its because we haven't
> installed a certificate.
>
> so...my questions are,
> 1) what is the best option for purchasing a certificate
> 2) I've seen free ones, do they work or not
>
> thanks,
> Bill

Bill · Joined: 22 Jan 2008 Posts: 5

Hi John,
those prices are very good, but why the UCC, as apposed to the "single"
we have only one domain....

thanks,
Bil

John Oliver, Jr. [MVP] wrote:
> If you are running Exchange 2007 then I would suggest a Unified Messaging
> Certificate. As you will find out they are not cheap but Go Daddy seems the
> most cost effective, a multiple year UCC will run you about $59 for up to 5
> domains.
>
> https://www.godaddy.com/gdshop/ssl/ssl.asp?ci=9039
>
>
>

John Oliver, Jr. [MVP] · Joined: 05 Aug 2007 Posts: 823

This should explain,

http://msexchangeteam.com/archive/2007/07/02/445698.aspx

--
John Oliver, Jr
MCSE, MCT, CCNA
Exchange MVP 2008
Microsoft Certified Partner

"Bill" wrote in message $scXIHA.4684@TK2MSFTNGP06.phx.gbl...
> Hi John,
> those prices are very good, but why the UCC, as apposed to the "single"
> we have only one domain....
>
> thanks,
> Bil
>
> John Oliver, Jr. [MVP] wrote:
>> If you are running Exchange 2007 then I would suggest a Unified Messaging
>> Certificate. As you will find out they are not cheap but Go Daddy seems
>> the most cost effective, a multiple year UCC will run you about $59 for
>> up to 5 domains.
>>
>> https://www.godaddy.com/gdshop/ssl/ssl.asp?ci=9039
>>
>>

Bill · Joined: 22 Jan 2008 Posts: 5

since I have only OWA and activesync connections from outside the
building, (I've never used autodiscover.domain.com, I have no outlook
clients outside of the building.) can I get away with single cert?

John Oliver, Jr. [MVP] wrote:
> This should explain,
>
> http://msexchangeteam.com/archive/2007/07/02/445698.aspx
>

John Oliver, Jr. [MVP] · Joined: 05 Aug 2007 Posts: 823

Sort of, since Outlook 2007 uses Autodiscover internally you will still need
to consider creating two Virtual Directories. In addition, if you have WM5
devices they do not support wilcard certs. This also would assume your
internal and external domain are the same. So here is the skinny on
creating to Websites using standard Commercial SSL Cert to get it working
properly in Exchange 2007,

http://www.sembee.co.uk/archive/2007/01/21/34.aspx

--
John Oliver, Jr
MCSE, MCT, CCNA
Exchange MVP 2008
Microsoft Certified Partner

"Bill" wrote in message $GgXIHA.280@TK2MSFTNGP04.phx.gbl...
>
> since I have only OWA and activesync connections from outside the
> building, (I've never used autodiscover.domain.com, I have no outlook
> clients outside of the building.) can I get away with single cert?
>
>
> John Oliver, Jr. [MVP] wrote:
>> This should explain,
>>
>> http://msexchangeteam.com/archive/2007/07/02/445698.aspx
>>

Bill · Joined: 22 Jan 2008 Posts: 5

so, if I get the UCC multiple domain cert, the fist one would of course
be mail.mydomain.com, and the second one autodiscover.mydomain.com? what
other domains should I register? can I change the domain names later
down the road after they issue the cert?

thanks for your help John

-Bill

John Oliver, Jr. [MVP] wrote:
> Sort of, since Outlook 2007 uses Autodiscover internally you will still need
> to consider creating two Virtual Directories. In addition, if you have WM5
> devices they do not support wilcard certs. This also would assume your
> internal and external domain are the same. So here is the skinny on
> creating to Websites using standard Commercial SSL Cert to get it working
> properly in Exchange 2007,
>
> http://www.sembee.co.uk/archive/2007/01/21/34.aspx
>
>

more newbie help Hi all, we have an SBS2003 server running Exchange 2003. We are looking into getting either the Samsung i600 or Samsung i700 phones from Verizon. I have never used ActiveSync before, so I wanted to know how exactly will these units sync with exchange? Do

Windows Mobile 5.0 and Intermediate SSL certificates I'm trying to deploy some new HTC Cingular 8125 devices that use Direct Push from an MSX server. The server's SSL certificate uses a 3 tier certificate chain which works fine for web browsers, but requires manual installation o

OMA gives compile errors after installing SP1 I get the following output in IE6 when connecting to - after - on my Exchange enterprise 2003 on Windows 2003 box. I can't seem to find anyone else who has had this error. Server Error in '/OMA' Application. ___________

OMA with PDA and SmartPhone question Here is my bear in mind that I just found this NG and have recently started looking into the scenario. Any help/pushes in the right direction is appreciated. Customer has 15 travelling users. Currently is using SBS2000 and Exchange. Th

OMA Novice Question How do I obtain the NETBIOS name of my Exchange 2003 mailbox server? I grabbed the server name from Outlook 2003's e-mail accounts, and I can ping it from my corporate network, but it isn't browsable (I cannot get to it over http or https). Any help wou