Hi,
Does anyone know whether you need to have an SSL Certificate for Outlook Anywhere (which connects over https)
Is it a special type of SSL Cert? or will any do?
Ive managed SSL's in the past but for websites only.
Cheers,
Craig
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
The thing with Exchange 2007 is that the certificates are used for more than just Outlook Anywhere. They are used for a lot of the core functionality. If you go down the Microsoft route then you should be purchasing SAN certificates. However these are still very expensive - close to US$500 and there are limited suppliers.
The method I am using (which for some reason Microsoft don't recommend) is the multiple certificates method. I have blogged about it here: http://www.sembee.co.uk/ar
You have to install the certificates within Exchange to get them accepted correctly. I need to update my article or post again to indicate that. I have been using PowerGui to do that . http://www.powergui.org/
As pointed out, Go Daddy do the cheapest certificates, but if you have a co.uk domain they struggle to issue them. For co.uk you will need to spend a little more and go to RapidSSL, which are US$60 if bought direct, but I have seen them for less on reseller web sites.
Simon.
I am currently using MS Office 2003 in my environment, so i have not had any problems at all. I also tested this SSL setup with a free SSL from Startcom for several months before paying for one that is recognized by Microsoft & Mozilla.
I will have to cross the auto discover bridge when i upgrade to Office 2007. Unless you can give me the solution. I'm sure that when the time comes i will have to post it as an EE question.
According to http://technet.microsoft.c
Autodiscover and Certificates
One of the most important aspects of a successful Exchange messaging deployment is how you configure your SSL certificates for securing client communication to your Exchange infrastructure. This is because all communication between Outlook clients and the Autodiscover service endpoint, in addition to communication between the Outlook client and Exchange services, occurs over an SSL channel. For this communication to occur without failing, you must have a valid SSL certificate installed. For a certificate to be considered valid, it must meet the following criteria for the Autodiscover service:
The client can follow the certificate chain up to the trusted root.
The name matches the URL that the client is trying to communicate with.
The certificate is current and has not expired.
My SSL meets the above 3 criteria, so i am not sure what would cause the Cert support issue you mention.
The issues are around the name on the SSL certificate and getting it trusted. If you look at what Autodiscover works on, without some heavy hacking around it work on a limited number of URLs and will generate errors.
If you haven't deployed Outlook 2007 then you will not have seen the errors, but anyone who has will be well aware of the problems. If you look at expert ATIG's blog he has a big article on Autodiscover which is probably the biggest pain point for Exchange 2007 admins with Outlook 2007.
Simon.
From Microsoft:
http://technet.microsoft.c
Benefits of Using Outlook Anywhere
There are several benefits to using Outlook Anywhere to enable Outlook 2003 and Outlook 2007 clients to access your Exchange messaging infrastructure. The benefits are as follows:
Remote access to Exchange servers from the Internet.
You can use the same URL and namespace that you use for Microsoft Exchange ActiveSync and Outlook Web Access.
You can use the same Secure Sockets Layer (SSL) server certificate that you use for both Outlook Web Access and Exchange ActiveSync.
Unauthenticated requests from Outlook cannot access Exchange servers.
Clients must trust the certification authority that issues the certificate.
You do not have to use a virtual private network (VPN) to access Exchange servers across the Internet.
You must allow only port 443 through your firewall, because Outlook requests use HTTP over SSL. If you already use Outlook Web Access with SSL or Exchange ActiveSync with SSL, you do not have to open any additional ports from the Internet.
thanks so much for all your information guys!
im gonna test all this out with a Verisign 14 day trial ssl cert.
Im having a little trouble generating a key that verisign will accept:
New-ExchangeCertificate -GenerateRequest -DomainName mail.mydomain.com,autodisc
is there something wrong with my request command above?
thanks,
Business Accounts
Answer for Membership
by: victorjones1Posted on 2007-11-13 at 08:50:25ID: 20272909
Yes, you need to either create one yourself or purchase one.