Do I need to purchase a certificate to use RPC over HTTP with Exchange 2007

Hi,

I am in the process of setting up Exchange 2007.  

OWA will work with the built-in default certificate but I think I read somewhere that RPC-HTTP needs a trusted cert to work.  Does this mean I will need to purchase one?  

Thanks,

Mark
markholmes24Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

BiPodCommented:
Depending on your environment you will either need a self signed Subject Alternative Name (SAN) certificate or you will have to purchase a SAN certificate.

If you go for a self signed certificate using your own certificate authority you'll obviously have to provide the trusted root certificate to your end users otherwise they'll get a certificate security warning when trying to conenct via RPC-over-HTTP.  If you go for a purchased certificate (from someone like Digicert who are very good) then the root certificates come pre installed on the client Operating System.

I went with a Digicert certificate and included the following SANs in it

mail.domain.com (for OWA)
autodiscover.domain.com (for the autodiscover service)
CAS.server.fqdn
CASServer

This essentially allowed me to get everything from Outlook on the LAN to OWA and RPC-over-HTTP (with autodiscover) working without any security warnings.

Cheers

BiPod
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
BiPodCommented:
Also, i found this article useful for creating SAN certificates when testing using my own certificate authority on windows server 2003.

http://support.microsoft.com/kb/931351
0
markholmes24Author Commented:
BiPod - many thanks for that.
0
markholmes24Author Commented:
Cheers BiPod!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.