Solved

how to issue a public and local domain certificate

Posted on 2010-08-24
8
539 Views
Last Modified: 2012-05-10
I have exchange 2007 and currently have a ucc certificate at go daddy for my OWA but my local has a different domain name. public.domain.com/owa and my local is local.domain.com. Currently outlook client is indicating that the certificate does not match the name of the site and the name of the security is not valid.
0
Comment
Question by:jsistoza
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
8 Comments
 
LVL 15

Expert Comment

by:Dave_AND
ID: 33519359
You need to make sure both certs are the same and match or you will always get cert issues. Have a read thru http://msexchangeteam.com/archive/2007/02/19/435472.aspx and make your internal cert match your remote cert.
0
 
LVL 28

Accepted Solution

by:
sunnyc7 earned 250 total points
ID: 33519939
You need to re-key your certificate from GoDaddy
http://help.godaddy.com/topic/236/article/4976

you have to enter the following domains

mail.domain.com (external facing FQDN)
autodiscover.domain.com (Create an entry in your godaddy DNS for autodiscover to point to your public IP)
mail.domain.local (FQDN of Exchange Server )
mailservername (mail server name)

You can use this tool to install it after that
www.u-btech.com/products/certificate-manager-for-exchange-2007.html
0
 
LVL 17

Expert Comment

by:Andres Perales
ID: 33520113
Just add that domain name to your internal DNS point to your internal IP address for your server.
0
Instantly Create Instructional Tutorials

Contextual Guidance at the moment of need helps your employees adopt to new software or processes instantly. Boost knowledge retention and employee engagement step-by-step with one easy solution.

 

Author Comment

by:jsistoza
ID: 33524202
peralesa, how do i add the domain name?
0
 
LVL 28

Expert Comment

by:sunnyc7
ID: 33524282
From your dc
Start run
Dnsmgmt.msc

Add an a record for your domain name poiting to exchange server internal ip address
0
 

Author Comment

by:jsistoza
ID: 33525830
I have added the subject alternative name to my certificate in go daddys manage certificate website.
I will then install it to my server and im sure its going to work.

Thank you all for the info.
0
 
LVL 28

Expert Comment

by:sunnyc7
ID: 33525872
Use the ubtech tool to do that
0
 

Author Comment

by:jsistoza
ID: 33525888
Yes i installed the tool and its very user friendly vs. the command shell in exchange.
Thanks!
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

How to resolve IMCEAEX NDRs in Exchange or Exchange Online related to invalid X500 addresses.
This article will help to fix the below error for MS Exchange server 2010 I. Out Of office not working II. Certificate error "name on the security certificate is invalid or does not match the name of the site" III. Make Internal URLs and External…
This video demonstrates how to sync Microsoft Exchange Public Folders with smartphones using CodeTwo Exchange Sync and Exchange ActiveSync. To learn more about CodeTwo Exchange Sync and download the free trial, go to: http://www.codetwo.com/excha…
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question