• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 329
  • Last Modified:

SBS 2008 UCC cert - why is 'SITES' recommended as a SAN

Was wondering what the purpose was for recommending adding 'Sites' as a subject alternative name in a UCC cert for Exchange 2007 in SBS 2008.  I saw this recommended in Sembee's article : http://blog.sembee.co.uk/post/SBS-2008-Certificate-Installation.aspx
0
smocohiba
Asked:
smocohiba
  • 2
1 Solution
 
Cliff GaliherCommented:
If you do not ru. The Internet address wizard then the default website host header is "sites."

With that said, the wizard does A LOT of things, should NEVER be skipped, and therefore I am personally of the opinion that "sites" on a UCC/SAN cert is completely unnecessary.

But ifmyou run all the wizards properly, a UCC/SAN cert is completely unnecessary as well, and they are more expensive. A simple cert is very functional on SBS.

-Cliff
0
 
smocohibaAuthor Commented:
Hmmm I had been getting UCC certs for Exchange 2007 / 2010 primarily for the alternative names which I thought Outlook Anywhere and EWS required.  So you're saying in SBS 2008 / 2011 the wizards would let me get away with just using a simple cert?
0
 
Cliff GaliherCommented:
OA can use the default remote.your-domain.com URL. you just need to create a SRV record with your *EXTERNAL* DNS provider so outlook finds the correct URL. Internally, the SBS wizards create the domain name and configure exchange and IIS to use it, so yes, a single name cert works fine. Third Tier has a blog post on this topic as well. http://www.thirdtier.net/2009/02/setting-up-an-external-autodiscover-record-for-sbs-2008/
0

Featured Post

NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now