Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

SBS 2008 UCC cert - why is 'SITES' recommended as a SAN

Posted on 2011-09-23
3
321 Views
Last Modified: 2012-05-12
Was wondering what the purpose was for recommending adding 'Sites' as a subject alternative name in a UCC cert for Exchange 2007 in SBS 2008.  I saw this recommended in Sembee's article : http://blog.sembee.co.uk/post/SBS-2008-Certificate-Installation.aspx
0
Comment
Question by:smocohiba
  • 2
3 Comments
 
LVL 57

Expert Comment

by:Cliff Galiher
ID: 36590424
If you do not ru. The Internet address wizard then the default website host header is "sites."

With that said, the wizard does A LOT of things, should NEVER be skipped, and therefore I am personally of the opinion that "sites" on a UCC/SAN cert is completely unnecessary.

But ifmyou run all the wizards properly, a UCC/SAN cert is completely unnecessary as well, and they are more expensive. A simple cert is very functional on SBS.

-Cliff
0
 

Author Comment

by:smocohiba
ID: 36595104
Hmmm I had been getting UCC certs for Exchange 2007 / 2010 primarily for the alternative names which I thought Outlook Anywhere and EWS required.  So you're saying in SBS 2008 / 2011 the wizards would let me get away with just using a simple cert?
0
 
LVL 57

Accepted Solution

by:
Cliff Galiher earned 125 total points
ID: 36596287
OA can use the default remote.your-domain.com URL. you just need to create a SRV record with your *EXTERNAL* DNS provider so outlook finds the correct URL. Internally, the SBS wizards create the domain name and configure exchange and IIS to use it, so yes, a single name cert works fine. Third Tier has a blog post on this topic as well. http://www.thirdtier.net/2009/02/setting-up-an-external-autodiscover-record-for-sbs-2008/
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This process describes the steps required to Import and Export data from and to .pst files using Exchange 2010. We can use these steps to export data from a user to a .pst file, import data back to the same or a different user, or even import data t…
Find out what you should include to make the best professional email signature for your organization.
To show how to create a transport rule in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Rules tab.:  To cr…
This video discusses moving either the default database or any database to a new volume.

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question