Solved

Do I need to purchase a certificate to use RPC over HTTP with Exchange 2007

Posted on 2008-06-26
4
173 Views
Last Modified: 2010-04-21
Hi,

I am in the process of setting up Exchange 2007.  

OWA will work with the built-in default certificate but I think I read somewhere that RPC-HTTP needs a trusted cert to work.  Does this mean I will need to purchase one?  

Thanks,

Mark
0
Comment
Question by:markholmes24
  • 2
  • 2
4 Comments
 
LVL 6

Accepted Solution

by:
BiPod earned 125 total points
ID: 21875371
Depending on your environment you will either need a self signed Subject Alternative Name (SAN) certificate or you will have to purchase a SAN certificate.

If you go for a self signed certificate using your own certificate authority you'll obviously have to provide the trusted root certificate to your end users otherwise they'll get a certificate security warning when trying to conenct via RPC-over-HTTP.  If you go for a purchased certificate (from someone like Digicert who are very good) then the root certificates come pre installed on the client Operating System.

I went with a Digicert certificate and included the following SANs in it

mail.domain.com (for OWA)
autodiscover.domain.com (for the autodiscover service)
CAS.server.fqdn
CASServer

This essentially allowed me to get everything from Outlook on the LAN to OWA and RPC-over-HTTP (with autodiscover) working without any security warnings.

Cheers

BiPod
0
 
LVL 6

Expert Comment

by:BiPod
ID: 21875472
Also, i found this article useful for creating SAN certificates when testing using my own certificate authority on windows server 2003.

http://support.microsoft.com/kb/931351
0
 

Author Comment

by:markholmes24
ID: 21875648
BiPod - many thanks for that.
0
 

Author Closing Comment

by:markholmes24
ID: 31470985
Cheers BiPod!
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Follow this checklist to learn more about the 15 things you should never include in an email signature from personal quotes, animated gifs and out-of-date marketing content.
Scam emails are a huge burden for many businesses. Spotting one is not always easy. Follow our tips to identify if an email you receive is a scam.
In this video we show how to create a Contact in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Contact ta…
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question