?
Solved

Do I need to purchase a certificate to use RPC over HTTP with Exchange 2007

Posted on 2008-06-26
4
Medium Priority
?
187 Views
Last Modified: 2010-04-21
Hi,

I am in the process of setting up Exchange 2007.  

OWA will work with the built-in default certificate but I think I read somewhere that RPC-HTTP needs a trusted cert to work.  Does this mean I will need to purchase one?  

Thanks,

Mark
0
Comment
Question by:markholmes24
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 6

Accepted Solution

by:
BiPod earned 500 total points
ID: 21875371
Depending on your environment you will either need a self signed Subject Alternative Name (SAN) certificate or you will have to purchase a SAN certificate.

If you go for a self signed certificate using your own certificate authority you'll obviously have to provide the trusted root certificate to your end users otherwise they'll get a certificate security warning when trying to conenct via RPC-over-HTTP.  If you go for a purchased certificate (from someone like Digicert who are very good) then the root certificates come pre installed on the client Operating System.

I went with a Digicert certificate and included the following SANs in it

mail.domain.com (for OWA)
autodiscover.domain.com (for the autodiscover service)
CAS.server.fqdn
CASServer

This essentially allowed me to get everything from Outlook on the LAN to OWA and RPC-over-HTTP (with autodiscover) working without any security warnings.

Cheers

BiPod
0
 
LVL 6

Expert Comment

by:BiPod
ID: 21875472
Also, i found this article useful for creating SAN certificates when testing using my own certificate authority on windows server 2003.

http://support.microsoft.com/kb/931351
0
 

Author Comment

by:markholmes24
ID: 21875648
BiPod - many thanks for that.
0
 

Author Closing Comment

by:markholmes24
ID: 31470985
Cheers BiPod!
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article explains how to install and use the NTBackup utility that comes with Windows Server.
This article will help to fix the below error for MS Exchange server 2010 I. Out Of office not working II. Certificate error "name on the security certificate is invalid or does not match the name of the site" III. Make Internal URLs and External…
In this video we show how to create a Shared Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Sha…
how to add IIS SMTP to handle application/Scanner relays into office 365.
Suggested Courses
Course of the Month13 days, 10 hours left to enroll

800 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question