Solved

how to issue a public and local domain certificate

Posted on 2010-08-24
8
534 Views
Last Modified: 2012-05-10
I have exchange 2007 and currently have a ucc certificate at go daddy for my OWA but my local has a different domain name. public.domain.com/owa and my local is local.domain.com. Currently outlook client is indicating that the certificate does not match the name of the site and the name of the security is not valid.
0
Comment
Question by:jsistoza
8 Comments
 
LVL 15

Expert Comment

by:Dave_AND
ID: 33519359
You need to make sure both certs are the same and match or you will always get cert issues. Have a read thru http://msexchangeteam.com/archive/2007/02/19/435472.aspx and make your internal cert match your remote cert.
0
 
LVL 28

Accepted Solution

by:
sunnyc7 earned 250 total points
ID: 33519939
You need to re-key your certificate from GoDaddy
http://help.godaddy.com/topic/236/article/4976

you have to enter the following domains

mail.domain.com (external facing FQDN)
autodiscover.domain.com (Create an entry in your godaddy DNS for autodiscover to point to your public IP)
mail.domain.local (FQDN of Exchange Server )
mailservername (mail server name)

You can use this tool to install it after that
www.u-btech.com/products/certificate-manager-for-exchange-2007.html
0
 
LVL 17

Expert Comment

by:Andres Perales
ID: 33520113
Just add that domain name to your internal DNS point to your internal IP address for your server.
0
 

Author Comment

by:jsistoza
ID: 33524202
peralesa, how do i add the domain name?
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 28

Expert Comment

by:sunnyc7
ID: 33524282
From your dc
Start run
Dnsmgmt.msc

Add an a record for your domain name poiting to exchange server internal ip address
0
 

Author Comment

by:jsistoza
ID: 33525830
I have added the subject alternative name to my certificate in go daddys manage certificate website.
I will then install it to my server and im sure its going to work.

Thank you all for the info.
0
 
LVL 28

Expert Comment

by:sunnyc7
ID: 33525872
Use the ubtech tool to do that
0
 

Author Comment

by:jsistoza
ID: 33525888
Yes i installed the tool and its very user friendly vs. the command shell in exchange.
Thanks!
0

Featured Post

Swamped with email signature updates?

Have you been given a load of changes to make to your users’ email signatures? Having to manually implement multiple signatures for every department? Let Exclaimer save you from being swamped with email signature updates!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Exchange server is not supported in any cloud-hosted platform (other than Azure with Azure Premium Storage).
MS Outlook is a world-class email client application that is mainly used for e-communication globally.  In this article, we will discuss the basic idea about MS Outlook, its advanced features, and types of MS Outlook File formats.
In this video we show how to create an Address List in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Organization >> Ad…
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…

930 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now