Solved

how to issue a public and local domain certificate

Posted on 2010-08-24
8
538 Views
Last Modified: 2012-05-10
I have exchange 2007 and currently have a ucc certificate at go daddy for my OWA but my local has a different domain name. public.domain.com/owa and my local is local.domain.com. Currently outlook client is indicating that the certificate does not match the name of the site and the name of the security is not valid.
0
Comment
Question by:jsistoza
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
8 Comments
 
LVL 15

Expert Comment

by:Dave_AND
ID: 33519359
You need to make sure both certs are the same and match or you will always get cert issues. Have a read thru http://msexchangeteam.com/archive/2007/02/19/435472.aspx and make your internal cert match your remote cert.
0
 
LVL 28

Accepted Solution

by:
sunnyc7 earned 250 total points
ID: 33519939
You need to re-key your certificate from GoDaddy
http://help.godaddy.com/topic/236/article/4976

you have to enter the following domains

mail.domain.com (external facing FQDN)
autodiscover.domain.com (Create an entry in your godaddy DNS for autodiscover to point to your public IP)
mail.domain.local (FQDN of Exchange Server )
mailservername (mail server name)

You can use this tool to install it after that
www.u-btech.com/products/certificate-manager-for-exchange-2007.html
0
 
LVL 17

Expert Comment

by:Andres Perales
ID: 33520113
Just add that domain name to your internal DNS point to your internal IP address for your server.
0
Edgartown IT Case Study

Learn about Edgartown's quest to ensure the safety and security of the entire town's employee and citizen data. Read the case study!

 

Author Comment

by:jsistoza
ID: 33524202
peralesa, how do i add the domain name?
0
 
LVL 28

Expert Comment

by:sunnyc7
ID: 33524282
From your dc
Start run
Dnsmgmt.msc

Add an a record for your domain name poiting to exchange server internal ip address
0
 

Author Comment

by:jsistoza
ID: 33525830
I have added the subject alternative name to my certificate in go daddys manage certificate website.
I will then install it to my server and im sure its going to work.

Thank you all for the info.
0
 
LVL 28

Expert Comment

by:sunnyc7
ID: 33525872
Use the ubtech tool to do that
0
 

Author Comment

by:jsistoza
ID: 33525888
Yes i installed the tool and its very user friendly vs. the command shell in exchange.
Thanks!
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Marketers need statistics and metrics like everybody else needs oxygen. In this article we explain how to enable marketing campaign statistics for Microsoft Exchange mail.
This article lists the top 5 free OST to PST Converter Tools. These tools save a lot of time for users when they want to convert OST to PST after their exchange server is no longer available or some other critical issue with exchange server or impor…
In this video we show how to create a mailbox database in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Servers >> Data…
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…

737 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question