[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1018
  • Last Modified:

SSL cert pop-up when accessing OWA with a CNAME

I have a new E2K server that work just fne, there is however one niggly little annoyance. The SSL cert pops up when users access the OWA with a CNAME, is there anyway around?

https://realhostname.domain.com/exchange --> no SSL popup
https://cname.domain.com/exchange --> SSL popup
0
froggy_bill
Asked:
froggy_bill
  • 3
  • 2
1 Solution
 
EmptyoneCommented:
The reason is that you have issued the certificate with the servers realhostname. If you want them to reach the server on a different name, for instance from internet, then you would have to issue the certificate in that name
0
 
rhettleeCommented:
Bill,
Have you tried clicking the "View Certificate" and then importing it when accessing the OWA using the CNAME? Your still accessing the same server right? So they are both sites is issuing the same certificate.
0
 
froggy_billAuthor Commented:
let me give that a try...brb
0
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

 
froggy_billAuthor Commented:
Nope...
'This certificate cannot be trusted up to a trusted certificate authority.'
0
 
froggy_billAuthor Commented:
this works...
You will have received 3 Certificates. Save these Certificates to the desktop of the webserver machine, then:

Click the Start Button then selct Run and type mmc
Click File and select Add/Remove Snap in
Select Add, select Certificates from the Add Standalone Snap-in box and click Add
Select Computer Account and click Finish
Close the Add Standalone Snap-in box, click OK in the Add/Remove Snap in
Return to the MMC
To install the TrustRoot Certificate:


Right click the Trusted Root Certification Authorities, select All Tasks, select Import.


Click Next.


Locate the TrustRoot Certificate and click Next.
When the wizard is completed, click Finish.
To install the SecurityServicesCA Certificate:


Right click the Intermediate Certification Authorities, select All Tasks, select Import.
Complete the import wizard again, but this time locating the SecurityServicesCA Certificate when prompted for the Certificate file.
Ensure that the TrustRoot certificate appears under Trusted Root Certification Authorities
Ensure that the SecurityServicesCA appears under Intermediate Certification Authorities
Installing your IIS SSL Certificate:
Select Administrative Tools
Start Internet Services Manager


Open the properties window for the website. You can do this by right clicking on the Default Website and selecting Properties from the menu.
Open Directory Security by right clicking on the Directory Security tab


Click Server Certificate.

Choose to Process the Pending Request and Install the Certificate. Click Next.
Enter the location of your IIS SSL certificate (you may also browse to locate your IIS SSL certificate), and then click Next.
Read the summary screen to be sure that you are processing the correct certificate, and then click Next.
You will see a confirmation screen. When you have read this information, click Next.
You now have an IIS SSL server certificate installed.
Important: You must now restart the computer to complete the install

You may want to test the Web site to ensure that everything is working correctly. Be sure to use when you test connectivity to the site.
0
 
EmptyoneCommented:
To just have one certificate, make add a host in your DNS pointing do your exchange server with the same name you want it to be reached from on the internet.

Exchange server name: exchange.domain.com
Host added to DNS: mail.domain.com
Used on internet: mail.domain.com

Certificate issued on this address: mail.domain.com

0

Featured Post

Get quick recovery of individual SharePoint items

Free tool – Veeam Explorer for Microsoft SharePoint, enables fast, easy restores of SharePoint sites, documents, libraries and lists — all with no agents to manage and no additional licenses to buy.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now