Link to home
Start Free TrialLog in
Avatar of TSCF_EMS
TSCF_EMSFlag for United States of America

asked on

Configuring SSL for OWA/ActiveSync

Exchange 2003 OWA working great when SSL is not forced. I have an SSL Cert in place. When I force SSL for "Default Site" and enable Form Authentication the page can not be displayed. This is a stand alone Exchange 03, on Server 03. Any advice would be appriciated to bring SSL up in OWA and ActiveSync. Thanks.
Avatar of tompi68
tompi68

May be this step by step guide helps you out

http://www.petri.co.il/configure_ssl_on_owa.htm
Avatar of TSCF_EMS

ASKER

I have went through this procedure before, and when I do enable SSL I can not access the OWA within the LAN or the WAN. However, when I try to access the OWA via HTTP (with SSL enforceed) I do get the error that HTTPS is required to access the page (LAN and WAN).
A note to add.
Server 03/ Exchange 03 server is sending and receiving email just fine. If you want to run HTTP(S), DNS, MX diagnostic the domain is tscfems.com.
MX= MAIL2.TSCFEMS.COM
OWA URL:= mail2.tscfems.local
Sorry.
OWA URL = tscfems.com/exchange
HI There,

IF i am not wrong then the Exchnage server ia a 2003 server, so in that case I wouldn't force SSL on the default web site instead force it on Exchange and Microsoft-Server-ActiveSync virtual directories for OWA and activesync respectively

Try this:
Install the certificate on Default Web Site and uncheck require SSL for the Secure communication and from the server itself open a web browser and enter https://localhost and see what happens, if this fails then there might be some issue with your certificate and you might need to fix that.

Imran
I have tried your suggestions and I get the same results. The cert was issued by godaddy. I even had them re issue it again to make sure the cert was valid. Strange thing is that HTTPS for OWA was working about two weeks ago without a cert installed. I tried to replicate that again and still no go.
So, if you tried https://localhost then it is the same error Page Cannot be Displayed. If this is the case then Go to the properties of the default web site and check if we have the SSL port configured for it. if then go to the security tab of the Web Site and click view certificate and make sure you see a Private Key on the certificate, I mean check out the General Tab and at the bottom of the certificate and it would state that "you have a private key assigned to this Certificate"
True, however if I did not have a cert installed I should still be able to view an SSL site locally or publicly by self signing, correct?
If you do not have a certificate or port 443 configured on your website then you won't be able to view your site locally or pulically over SSL, these 2 things are the basic requirement for a site to view it over SSL but you can view other sites like https://www.gmail.com
I do have the site configured for port 443. To narrow it down a bit further I created another site, configured for port 443 and tried to access it. No go. Do I need to reinstall IIS?
The site which you have configured for port 443 should also have the Certificate installed. Is that the case, If so then go to the properties of the Web SIte > Directory Security > View Certificate and see if you can see the a statement at the bottom of the certificate below the Validity Period that would say"This Certificate has a Private Key assigned"
I do not see anything below the issue dates. Attached is a screen shot.
1.jpg
ASKER CERTIFIED SOLUTION
Avatar of ikshf143
ikshf143
Flag of India image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
This worked great. OWA over HTTPS is working fine now. Thank you for your help.