Solved

SAN/UCC names, cannot add the internal name

Posted on 2010-09-15
9
844 Views
Last Modified: 2013-11-30
I was not able to add the internal name since the certificate comon name is mydomain.com, so to add the alternate name servername.mydomain.local was not possible on the same certificate.
OR is it possible?
Godaddy is the one issuing the UCC certificate.
For alternate names I have:mail and autodiscovery so I end up with mail.mydomain.com and autodiscovery.mydomain.com

I did created a primary zone on my internal DNS with mydomain.com and added the record for autodiscovery and mail.
What is your opinion?
0
Comment
Question by:betotucho
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 4
9 Comments
 
LVL 74

Expert Comment

by:Glen Knight
ID: 33682125
It is possible.

For example my server has the following names in it's certificate:
DNS Name=owa.domain1.co.uk
DNS Name=owa.domain2.co.uk
DNS Name=owa.domain3.com
DNS Name=owa.domain4.co.uk
DNS Name=autodiscover.domain1.co.uk
DNS Name=autodiscover.domain3.com
DNS Name=autodiscover.domain2.co.uk
DNS Name=autodiscover.domain4.co.uk
DNS Name=servername.internaldomain.local


0
 
LVL 74

Expert Comment

by:Glen Knight
ID: 33682129
why are you creating an internal domain of mydomain.com in your DNS?
0
 

Author Comment

by:betotucho
ID: 33682598
Thank for your comments.
DeMAzter:

Who is your certificate provider, Goddaddy did not let add mydomain.local at all.

I need the internal when users with laptops that not belong to the domain, but the yet the users have an Outllook account want to connect using RPC.
If you see the related question, I had the issue where If the internal servername is not part of the certificate you WILL receive a certificate error in outlook using the default configuration.
So, if I have autodiscovery and mail records on a mydomain.com DNS, and the user is using RPC, they do not get errors.
0
Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

 
LVL 74

Expert Comment

by:Glen Knight
ID: 33682651
GoDaddy should allow you to do this, as most will.

How are you requesting the certificate?

There is no need to change the default configuration of Exchange or DNS to make this work properly.
0
 

Author Comment

by:betotucho
ID: 33682801
I requested a 2048 certificate with common name mydomain.com
On Goddady, I requested a UCC certificate, I entered the thumbprint text of the certificate, then below the request it said alternate names for which I choose
mail, and autodiscovery.
I cannot enter servername.mydomain.local
0
 
LVL 74

Expert Comment

by:Glen Knight
ID: 33682918
You need to add these in to the CSR request, which version of Exchange are you using?

You might want to take a look at my blog here with regards to a utility that can generate the correct request for you: http://demazter.wordpress.com/2010/06/15/exchange-2007-ssl-certificates/
0
 

Author Comment

by:betotucho
ID: 33683049
SBS2003, XCH2003
Thank you, but as I stated, you cannot add the servername.mydomain.local to a common name mydomain.com
Not on Goddady at least.
I will let you know how it turns out.
0
 
LVL 74

Accepted Solution

by:
Glen Knight earned 500 total points
ID: 33683158
I am not sure I understand your last statement.  If you are using a SAN/UCC certificate you can add whatever domains you like as long as you own them.

For exchange 2003 you don't need a SAN/UCC certificate.  All you need is the external URL you will use.
0
 

Author Comment

by:betotucho
ID: 33684294
I did mamage to rekey the certificate request and add the Alternate Names.
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Lotus Notes – formerly IBM Notes – is an email client application, while IBM Domino (earlier Lotus Domino) is an email server. The client possesses a set of features that are even more advanced as compared to that of Outlook. Likewise, IBM Domino is…
This article will help to fix the below errors for MS Exchange Server 2013 I. Certificate error "name on the security certificate is invalid or does not match the name of the site" II. Out of Office not working III. Make Internal URLs and Externa…
To show how to create a transport rule in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Rules tab.:  To cr…
This video discusses moving either the default database or any database to a new volume.
Suggested Courses
Course of the Month8 days, 18 hours left to enroll

615 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question