• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 335
  • Last Modified:

SBS 2008 UCC cert - why is 'SITES' recommended as a SAN

Was wondering what the purpose was for recommending adding 'Sites' as a subject alternative name in a UCC cert for Exchange 2007 in SBS 2008.  I saw this recommended in Sembee's article : http://blog.sembee.co.uk/post/SBS-2008-Certificate-Installation.aspx
0
smocohiba
Asked:
smocohiba
  • 2
1 Solution
 
Cliff GaliherCommented:
If you do not ru. The Internet address wizard then the default website host header is "sites."

With that said, the wizard does A LOT of things, should NEVER be skipped, and therefore I am personally of the opinion that "sites" on a UCC/SAN cert is completely unnecessary.

But ifmyou run all the wizards properly, a UCC/SAN cert is completely unnecessary as well, and they are more expensive. A simple cert is very functional on SBS.

-Cliff
0
 
smocohibaAuthor Commented:
Hmmm I had been getting UCC certs for Exchange 2007 / 2010 primarily for the alternative names which I thought Outlook Anywhere and EWS required.  So you're saying in SBS 2008 / 2011 the wizards would let me get away with just using a simple cert?
0
 
Cliff GaliherCommented:
OA can use the default remote.your-domain.com URL. you just need to create a SRV record with your *EXTERNAL* DNS provider so outlook finds the correct URL. Internally, the SBS wizards create the domain name and configure exchange and IIS to use it, so yes, a single name cert works fine. Third Tier has a blog post on this topic as well. http://www.thirdtier.net/2009/02/setting-up-an-external-autodiscover-record-for-sbs-2008/
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now