asked on New 3rd Party SSL Certificate Stops OWA and Activesync working
Hi,
I have recently been asked to change the exisiting self-signed SSL Certificate on a server for a 3rd party Certificate for compliance reasons.
I have new certificates from www.networksolutions.com.
The exisiting certificate is for "mail.mydomain.com" issued by "mail.mydomain.com"
My new one if for "mail.mydomain.com" issued by Network Solutions DV Server.
I have installed the 2 other certificates (AddTrustExternalCARoot) and (NetworkSolutionsDVserverC
However, as soon as i replace my existing self-signed certificate (which all works) with the new NetworkSolutions Certificate, OWA and Activesync stop working.
What am I missing? Help
I have recently been asked to change the exisiting self-signed SSL Certificate on a server for a 3rd party Certificate for compliance reasons.
I have new certificates from www.networksolutions.com.
The exisiting certificate is for "mail.mydomain.com" issued by "mail.mydomain.com"
My new one if for "mail.mydomain.com" issued by Network Solutions DV Server.
I have installed the 2 other certificates (AddTrustExternalCARoot) and (NetworkSolutionsDVserverC
However, as soon as i replace my existing self-signed certificate (which all works) with the new NetworkSolutions Certificate, OWA and Activesync stop working.
What am I missing? Help
ExchangeSBSSSL / HTTPS
Last Comment
jerseysam
ASKER
I only included our "mail.mydomain.com"
how do i attach services etc?
Shall i post the https://www.testexchangeconnectivity.com/ log?
how do i attach services etc?
Shall i post the https://www.testexchangeconnectivity.com/ log?
ASKER CERTIFIED SOLUTION
THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
ASKER
Yes self-signed was exactly same (mail.mydomain.com).
How do i install trusted roots on clients and iphones etc?
How do i install trusted roots on clients and iphones etc?
it depends on how you have your external service configured
is OWA and Active Sync pointed at the same url i.e. https://mail.mydomain.com/owa or
https://mail.mydomain.com/active-sync
is OWA and Active Sync pointed at the same url i.e. https://mail.mydomain.com/owa or
https://mail.mydomain.com/active-sync
to attach services...
http://www.digicert.com/ssl-certificate-installation-microsoft-exchange-2010.htm
follow the last bit - if you assign IIS then that will cover OWA and Active Sync
if you post the log then it might be easier to see where any possible problems are
http://www.digicert.com/ssl-certificate-installation-microsoft-exchange-2010.htm
follow the last bit - if you assign IIS then that will cover OWA and Active Sync
if you post the log then it might be easier to see where any possible problems are
ASKER
Exchange 2003 and IIS v 6.0 so dont seem to have assign services
ahh sorry, my fault had assumed 2007 or 2010
you will probably need to do something in IIS, let me have a check its been a while since i played with 2003
you will probably need to do something in IIS, let me have a check its been a while since i played with 2003
ASKER
Yep.
think i need to create a new CRS request or somehting?
Seems that OWA works internally on server. Iphones do not work. OWA not working externally
think i need to create a new CRS request or somehting?
Seems that OWA works internally on server. Iphones do not work. OWA not working externally
ASKER
I think the issue is that when i created my CRS then i may not have chosen the correct info.
In exchange my DNS says "mydomain.com" but my FQDN is "servername.mydomain.local
What info should i use in my CRS? The self-generated certificate that works with iphones is "servername.mydomain.local
Help
In exchange my DNS says "mydomain.com" but my FQDN is "servername.mydomain.local
What info should i use in my CRS? The self-generated certificate that works with iphones is "servername.mydomain.local
Help
SOLUTION
THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
ASKER
Yes i thought internalserver.mydomain.lo
Will need to create a new CRS and ask the 3rd party to issue a new certificate (is they will for a .local).
Will need to create a new CRS and ask the 3rd party to issue a new certificate (is they will for a .local).
what services have you attached to the certificate
once you have changed it over you can use https://www.testexchangeconnectivity.com/
to check for errors