Solved

Do I need to purchase a certificate to use RPC over HTTP with Exchange 2007

Posted on 2008-06-26
4
166 Views
Last Modified: 2010-04-21
Hi,

I am in the process of setting up Exchange 2007.  

OWA will work with the built-in default certificate but I think I read somewhere that RPC-HTTP needs a trusted cert to work.  Does this mean I will need to purchase one?  

Thanks,

Mark
0
Comment
Question by:markholmes24
  • 2
  • 2
4 Comments
 
LVL 6

Accepted Solution

by:
BiPod earned 125 total points
ID: 21875371
Depending on your environment you will either need a self signed Subject Alternative Name (SAN) certificate or you will have to purchase a SAN certificate.

If you go for a self signed certificate using your own certificate authority you'll obviously have to provide the trusted root certificate to your end users otherwise they'll get a certificate security warning when trying to conenct via RPC-over-HTTP.  If you go for a purchased certificate (from someone like Digicert who are very good) then the root certificates come pre installed on the client Operating System.

I went with a Digicert certificate and included the following SANs in it

mail.domain.com (for OWA)
autodiscover.domain.com (for the autodiscover service)
CAS.server.fqdn
CASServer

This essentially allowed me to get everything from Outlook on the LAN to OWA and RPC-over-HTTP (with autodiscover) working without any security warnings.

Cheers

BiPod
0
 
LVL 6

Expert Comment

by:BiPod
ID: 21875472
Also, i found this article useful for creating SAN certificates when testing using my own certificate authority on windows server 2003.

http://support.microsoft.com/kb/931351
0
 

Author Comment

by:markholmes24
ID: 21875648
BiPod - many thanks for that.
0
 

Author Closing Comment

by:markholmes24
ID: 31470985
Cheers BiPod!
0

Featured Post

Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

Join & Write a Comment

Local Continuous Replication is a cost effective and quick way of backing up Exchange server data. The following article describes the steps required to configure Local Continuous Replication. Also, the article tells you how to restore from a backup…
Marketers need statistics and metrics like everybody else needs oxygen. In this article we explain how to enable marketing campaign statistics for Microsoft Exchange mail.
In this video we show how to create a Shared Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Sha…
In this Micro Video tutorial you will learn the basics about Database Availability Groups and How to configure one using a live Exchange Server Environment. The video tutorial explains the basics of the Exchange server Database Availability grou…

759 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now