how to generate self signed certificate

Hi,

my users getting certificate error while accessing outlook ,and OWA
arhcAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

setasoujiroCommented:
They will alway get that, unless you install the ROOT certificate of the server which generated the certificte in their "trusted root certificate" store.

You are better off however just buying an SSL from godaddy, they start at about 60$ for a year
0
pravinkbCommented:
You can follow the below link to create a self signed certificate
http://exchangepedia.com/2008/01/exchange-server-2007-renewing-the-self-signed-certificate.html

For external access, you have to purchase the third party certificate for your OWA url (eg. mail.domain.com) and have the DNS records updated.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
setasoujiroCommented:
He already has a self signed certificate from exchange, it's just not trusted as it's self signed..
0
systechadminConsultantCommented:
For Exchange server, SAN Certificate are specially designed. please refer https://www.thesslstore.com/san-ssl-certificates.aspx
0
Alan HardistyCo-OwnerCommented:
For Exchange 2010 (and 2007) you would be best advised to purchase a SAN / UCC SSL certificate with the following names included:

mail.externaldomain.com (or whatever you prefer)
autodiscover.externaldomain.com
internalservername.internaldomainname.local
internalservername

If you install a certificate with the above names then you will stop getting certificate prompts / errors and all aspects of Exchange will work, with the exception of Autodiscover, where you will have to add an A record in External DNS that points to the IP Address of your Exchange 2010 server.

As mentioned, GoDaddy are about the cheapest place to buy an SSL cert from, but a GoDaddy Reseller account is slightly cheaper.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.