froggy_bill
asked on
SSL cert pop-up when accessing OWA with a CNAME
I have a new E2K server that work just fne, there is however one niggly little annoyance. The SSL cert pops up when users access the OWA with a CNAME, is there anyway around?
https://realhostname.domain.com/exchange --> no SSL popup
https://cname.domain.com/exchange --> SSL popup
https://realhostname.domain.com/exchange --> no SSL popup
https://cname.domain.com/exchange --> SSL popup
Emptyone
The reason is that you have issued the certificate with the servers realhostname. If you want them to reach the server on a different name, for instance from internet, then you would have to issue the certificate in that name
Bill,
Have you tried clicking the "View Certificate" and then importing it when accessing the OWA using the CNAME? Your still accessing the same server right? So they are both sites is issuing the same certificate.
Have you tried clicking the "View Certificate" and then importing it when accessing the OWA using the CNAME? Your still accessing the same server right? So they are both sites is issuing the same certificate.
ASKER
let me give that a try...brb
ASKER
Nope...
'This certificate cannot be trusted up to a trusted certificate authority.'
'This certificate cannot be trusted up to a trusted certificate authority.'
ASKER
this works...
You will have received 3 Certificates. Save these Certificates to the desktop of the webserver machine, then:
Click the Start Button then selct Run and type mmc
Click File and select Add/Remove Snap in
Select Add, select Certificates from the Add Standalone Snap-in box and click Add
Select Computer Account and click Finish
Close the Add Standalone Snap-in box, click OK in the Add/Remove Snap in
Return to the MMC
To install the TrustRoot Certificate:
Right click the Trusted Root Certification Authorities, select All Tasks, select Import.
Click Next.
Locate the TrustRoot Certificate and click Next.
When the wizard is completed, click Finish.
To install the SecurityServicesCA Certificate:
Right click the Intermediate Certification Authorities, select All Tasks, select Import.
Complete the import wizard again, but this time locating the SecurityServicesCA Certificate when prompted for the Certificate file.
Ensure that the TrustRoot certificate appears under Trusted Root Certification Authorities
Ensure that the SecurityServicesCA appears under Intermediate Certification Authorities
Installing your IIS SSL Certificate:
Select Administrative Tools
Start Internet Services Manager
Open the properties window for the website. You can do this by right clicking on the Default Website and selecting Properties from the menu.
Open Directory Security by right clicking on the Directory Security tab
Click Server Certificate.
Choose to Process the Pending Request and Install the Certificate. Click Next.
Enter the location of your IIS SSL certificate (you may also browse to locate your IIS SSL certificate), and then click Next.
Read the summary screen to be sure that you are processing the correct certificate, and then click Next.
You will see a confirmation screen. When you have read this information, click Next.
You now have an IIS SSL server certificate installed.
Important: You must now restart the computer to complete the install
You may want to test the Web site to ensure that everything is working correctly. Be sure to use when you test connectivity to the site.
You will have received 3 Certificates. Save these Certificates to the desktop of the webserver machine, then:
Click the Start Button then selct Run and type mmc
Click File and select Add/Remove Snap in
Select Add, select Certificates from the Add Standalone Snap-in box and click Add
Select Computer Account and click Finish
Close the Add Standalone Snap-in box, click OK in the Add/Remove Snap in
Return to the MMC
To install the TrustRoot Certificate:
Right click the Trusted Root Certification Authorities, select All Tasks, select Import.
Click Next.
Locate the TrustRoot Certificate and click Next.
When the wizard is completed, click Finish.
To install the SecurityServicesCA Certificate:
Right click the Intermediate Certification Authorities, select All Tasks, select Import.
Complete the import wizard again, but this time locating the SecurityServicesCA Certificate when prompted for the Certificate file.
Ensure that the TrustRoot certificate appears under Trusted Root Certification Authorities
Ensure that the SecurityServicesCA appears under Intermediate Certification Authorities
Installing your IIS SSL Certificate:
Select Administrative Tools
Start Internet Services Manager
Open the properties window for the website. You can do this by right clicking on the Default Website and selecting Properties from the menu.
Open Directory Security by right clicking on the Directory Security tab
Click Server Certificate.
Choose to Process the Pending Request and Install the Certificate. Click Next.
Enter the location of your IIS SSL certificate (you may also browse to locate your IIS SSL certificate), and then click Next.
Read the summary screen to be sure that you are processing the correct certificate, and then click Next.
You will see a confirmation screen. When you have read this information, click Next.
You now have an IIS SSL server certificate installed.
Important: You must now restart the computer to complete the install
You may want to test the Web site to ensure that everything is working correctly. Be sure to use when you test connectivity to the site.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.