Monika-D
asked on
Security Certificate Error
Hello
in our source domain the Exchange 2007 ‘Client Access’ and ‘Hub Transport’ servers are issued SSL certificates from a Certificate Authority installed on one of our domain controllers.
Once the users AD account is migrated from the source domain to the target domain, when the users logon to the target domain they are receiving certificate warning message as they no longer trust the Certificate Authority issuing the SSL certificate to the Exchange servers in the source domain.
How can I configure the SSL certificate authority in our source domain to trust the target domain so migrated users will not receive certificate error when the logon to the target domain?
in our source domain the Exchange 2007 ‘Client Access’ and ‘Hub Transport’ servers are issued SSL certificates from a Certificate Authority installed on one of our domain controllers.
Once the users AD account is migrated from the source domain to the target domain, when the users logon to the target domain they are receiving certificate warning message as they no longer trust the Certificate Authority issuing the SSL certificate to the Exchange servers in the source domain.
How can I configure the SSL certificate authority in our source domain to trust the target domain so migrated users will not receive certificate error when the logon to the target domain?
ASKER
Hi
We have no Root CA Server in the our target domain. How do we get around this?
you need to publish the root CA certificate of the SOURCE domain using a GPO on the TARGET domain
ASKER
Hello and thank you for your comments.
Can I use the example in the link you sent me as the steps to follow to publish our CA certificate of the source in the target domain using GPO?
Any problem / risk I should be aware of doing it this way?
Can I use the example in the link you sent me as the steps to follow to publish our CA certificate of the source in the target domain using GPO?
Any problem / risk I should be aware of doing it this way?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
The solution was easy to follow and useful
Can I know, out of curiosity, was this was rated as a B ?
http://www.unixwiz.net/techtips/deploy-webcert-gp.html