Link to home
Start Free TrialLog in
Avatar of bruno71
bruno71Flag for United States of America

asked on

Exchange 2010 Autodiscover SSL Certificate

We have an Exchange 2010 server.  I believe the Autodiscover is setup correctly because it works fine from within our domain.  However, anyone who opens Outlook on a non-domain computer gets the attached certificate error (although, connectivity works fine after accepting).  Also, setting up an account on a smartphone does not auto-configure.

I believe I need to add an SSL certificate for our Autodiscover domain (autodiscover.domain-name.com).  After I purchase the SSL certificate, what other steps do I need to do to get things working?  Just install the certificate on the Exchange server?  

I already have an SSL certificate for mail.domain-name.com installed.  Can I install a second SSL certificate for autodiscover?

Thanks.
bruno71
SOLUTION
Avatar of Nick Rhode
Nick Rhode
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of bruno71

ASKER

User generated image
Most likely due to autodiscover.domain.com is missing from the ssl certificate currently installed.
ASKER CERTIFIED SOLUTION
Avatar of Simon Butler (Sembee)
Simon Butler (Sembee)
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Rather than buying a multi-domain cert, you might look into whether using a SAN (Subject Alternative Names) from your CA will work to list different subdomains within your domain.  For example, on the cert we have here (ourmail.ourdomain.com) we have listed five total SANs: ourmail.ourdomain.com, cas01.abc.local, cas02.abc.local, autodiscover.ourdomain.com, and loadbalancer.abc.local.  Our cert is thru GoDaddy and it's just a standard UCC.

Steve