Solved

SSL cert pop-up when accessing OWA with a CNAME

Posted on 2004-03-23
6
971 Views
Last Modified: 2006-11-17
I have a new E2K server that work just fne, there is however one niggly little annoyance. The SSL cert pops up when users access the OWA with a CNAME, is there anyway around?

https://realhostname.domain.com/exchange --> no SSL popup
https://cname.domain.com/exchange --> SSL popup
0
Comment
Question by:froggy_bill
  • 3
  • 2
6 Comments
 
LVL 8

Expert Comment

by:Emptyone
ID: 10664819
The reason is that you have issued the certificate with the servers realhostname. If you want them to reach the server on a different name, for instance from internet, then you would have to issue the certificate in that name
0
 
LVL 4

Expert Comment

by:rhettlee
ID: 10676393
Bill,
Have you tried clicking the "View Certificate" and then importing it when accessing the OWA using the CNAME? Your still accessing the same server right? So they are both sites is issuing the same certificate.
0
 

Author Comment

by:froggy_bill
ID: 10689671
let me give that a try...brb
0
Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

 

Author Comment

by:froggy_bill
ID: 10689719
Nope...
'This certificate cannot be trusted up to a trusted certificate authority.'
0
 

Author Comment

by:froggy_bill
ID: 10689846
this works...
You will have received 3 Certificates. Save these Certificates to the desktop of the webserver machine, then:

Click the Start Button then selct Run and type mmc
Click File and select Add/Remove Snap in
Select Add, select Certificates from the Add Standalone Snap-in box and click Add
Select Computer Account and click Finish
Close the Add Standalone Snap-in box, click OK in the Add/Remove Snap in
Return to the MMC
To install the TrustRoot Certificate:


Right click the Trusted Root Certification Authorities, select All Tasks, select Import.


Click Next.


Locate the TrustRoot Certificate and click Next.
When the wizard is completed, click Finish.
To install the SecurityServicesCA Certificate:


Right click the Intermediate Certification Authorities, select All Tasks, select Import.
Complete the import wizard again, but this time locating the SecurityServicesCA Certificate when prompted for the Certificate file.
Ensure that the TrustRoot certificate appears under Trusted Root Certification Authorities
Ensure that the SecurityServicesCA appears under Intermediate Certification Authorities
Installing your IIS SSL Certificate:
Select Administrative Tools
Start Internet Services Manager


Open the properties window for the website. You can do this by right clicking on the Default Website and selecting Properties from the menu.
Open Directory Security by right clicking on the Directory Security tab


Click Server Certificate.

Choose to Process the Pending Request and Install the Certificate. Click Next.
Enter the location of your IIS SSL certificate (you may also browse to locate your IIS SSL certificate), and then click Next.
Read the summary screen to be sure that you are processing the correct certificate, and then click Next.
You will see a confirmation screen. When you have read this information, click Next.
You now have an IIS SSL server certificate installed.
Important: You must now restart the computer to complete the install

You may want to test the Web site to ensure that everything is working correctly. Be sure to use when you test connectivity to the site.
0
 
LVL 8

Accepted Solution

by:
Emptyone earned 125 total points
ID: 10691021
To just have one certificate, make add a host in your DNS pointing do your exchange server with the same name you want it to be reached from on the internet.

Exchange server name: exchange.domain.com
Host added to DNS: mail.domain.com
Used on internet: mail.domain.com

Certificate issued on this address: mail.domain.com

0

Featured Post

Do email signature updates give you a headache?

Do you feel like you are constantly making changes to email signatures? Are the images not formatting how you want them to? Want high-quality HTML signatures on all devices, including on mobiles and Macs? Then, let Exclaimer solve all your email signature problems today.

Join & Write a Comment

Resolve Outlook connectivity issues after moving mailbox to new Exchange 2016 server
This article explains in simple steps how to renew expiring Exchange Server Internal Transport Certificate.
In this video we show how to create a Resource Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: Navigate to the Recipients >> Resources tab.: "Recipients" is our default selection …
To show how to create a transport rule in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Rules tab.:  To cr…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now