public ssl certificate for outlook anywhere

Posted on 2013-10-11
Medium Priority
Last Modified: 2013-10-14
Hi i am preparing a cutover office 365 mail migration from a sbs2008 server with a local domain name AD.
I read the setup guide and notice that outlook anywhere (rpc over http) needs to be installed.
A public ssl certificate is needed.
Active directory uses a local domain name and the Mx record on the internet points to mail.company.com
My questions are:
Can i use a free startcom level 1 certificate with only mail.company.com or do i need an UCC cetificate with more names in it?
Then which names to specify in the certificate only mail.company.com or more?(autodiscover,...)
Can you advice a free ssl certificate?
I  use temporary the certificate to migrate to office 365.
Thanks for the help
Question by:antwerp2007
  • 2
  • 2
LVL 63

Accepted Solution

Simon Butler (Sembee) earned 1800 total points
ID: 39565407
The StartCom certificate will probably work.
However you will need to configure SRV records for Autodiscover in your public DNS for it to work correctly. If your external DNS provider cannot support SRV records then you will have to use a UC certificate - the cheapest of those are about US$60/year.
In that case you would need to do remote.example.com and autodiscover.example.com (as SBS prefers to use remote.example.com unless you change it in the wizards).


Author Comment

ID: 39565862
Simon,thank you for the information.
I can create the necessary SRV (autodiscover,..) and txt records in the portal from the DNS provider.
So can i assume that a free startcom level 1 certificate with only the remote.example.com is sufficient?
LVL 46

Assisted Solution

by:Vasil Michev (MVP)
Vasil Michev (MVP) earned 200 total points
ID: 39566006
There are some other free providers as well (Comodo), so you can snatch one additional host :)
LVL 63

Assisted Solution

by:Simon Butler (Sembee)
Simon Butler (Sembee) earned 1800 total points
ID: 39566318
Most of the other "free" certificates only work for 90 days.
The startcom certificate should be fine - it is free, if it doesn't work, you haven't lost anything.

Do the SSL request through the SBS management tool, not Exchange.


Author Comment

ID: 39570172
Many thanks Simon!

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Upgrading from older Exchange server to the latest Exchange server can be tiresome, error-prone and risky, without being a seasoned exchange server administrators. It can become even problematic if you're an organization that runs on tight timeline…
Let us take a look at the scenario, you have a database that is corrupt and you run the ESEUTIL command only to find you are unable to repair it. How do you now get the data back?
In this video you will find out how to export Office 365 mailboxes using the built in eDiscovery tool. Bear in mind that although this method might be useful in some cases, using PST files as Office 365 backup is troublesome in a long run (more on t…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an anti-spam), the admin…

600 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question