[2 days left] What’s wrong with your cloud strategy? Learn why multicloud solutions matter with Nimble Storage.Register Now

x
?
Solved

SAN E-CERT Renewal

Posted on 2013-11-06
3
Medium Priority
?
261 Views
Last Modified: 2013-12-21
We are a sizable company and we are currently on a task of renewal or purchase again a SAN  (Subject Alternative Name) Digital certificate from Symantec. The previous year SAN cert has 5 domain/common name. Due to the business requirement this year we only need to register 4 domain/common name. We have the following queries:

1) Since the new SAN cert has less 1 common name and therefore Symantec mentioned that it is unavoidable but to re-apply a new cert ?

2) Since we need to go thru the CSR (Certification Signing Request) and Import cert on to our Server (Exchange Server ), is there any down time on an User perspective. i.e. Will the down time duration from the time we generate the CSR to the time will successfully import the cert. or is the down time only occurs during the time of e-cert installation ?
0
Comment
Question by:patricktam
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 19

Expert Comment

by:Kash
ID: 39627360
As far as I can see there is/shouldn't be any downtime in regards to users. The only thing will be the users outlook/email program will have pop up about certificate expiry and that should be all.

hope this helps.
0
 

Author Comment

by:patricktam
ID: 39629112
Thanks for your information. However, my concern is that since the new SAN cert has the original 4 domains out of 5 domains. The is not a renewal situation and we did need to regenerate the CSR, import cert process. Since 4 out of 5 domains name are exactly the same, do we need to remove the existing domain' certification before generating the CSR which means a very long downtime for the email client ?
0
 
LVL 19

Accepted Solution

by:
Kash earned 1000 total points
ID: 39629568
as far as I know if the existing certificate has expired then you are to generate a new request then like you said you will have to.

i would do it on a weekend may be friday evening and you will have 2 days to play around and make things work
0

Featured Post

Ask an Anonymous Question!

Don't feel intimidated by what you don't know. Ask your question anonymously. It's easy! Learn more and upgrade.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The canonical version of this article is on my web site here: http://iconoun.com/articles/collisions/ A companion presentation is available here: http://iconoun.com/articles/collisions/Unicode_Presentation.pdf
Lync meeting or Lync conferencing is what many organizations would like to deploy to allow them save money. But companies are now giving up for various reasons, one of which is that they cannot join external meetings (non-federated company meetings)…
Viewers will learn how to maximize accessibility options in an Excel workbook for users with accessibility issues.
The view will learn how to download and install SIMTOOLS and FORMLIST into Excel, how to use SIMTOOLS to generate a Monte Carlo simulation of 30 sales calls, and how to calculate the conditional probability based on the results of the Monte Carlo …

649 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question