If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.
Course Of The Month
1 day, 14 hours left to enrollBecome a Premium Member and unlock a new, free course in leading technologies each month.
Solved
Installing 3rd Party SSL Certificates on to Windows Server 2008 R2/Exchange 2010
Posted on 2014-01-10
We currently have a Self-Signed SSL Certificate on an Exchange 2010 Server running Windows Server 2008 R2. We purchased a third party certificate from Mediaura to replace our self-signed certificate. They sent us 3 Certificates and instructed us to install all 3. From IIS7, we were able to use the Complete Certificate Request to install the main mail.xxxxxx.org (SSL https:443) certificate successfully, but do not fully understand the function of the other two certificates or how they work in conjunction with the main certificate. Neither do we know how to or where to import these 2 certificates.
The certificates are called "AddTrustCARoot.crt" and "PositivesSSLCA2.crt".
Please help us to understand how these certificates work with the server certificate and what we need to do to correctly install these on our server.
The certificates are called "AddTrustCARoot.crt" and "PositivesSSLCA2.crt".
Please help us to understand how these certificates work with the server certificate and what we need to do to correctly install these on our server.
[X]
Welcome to Experts Exchange
Add your voice to the tech community where 5M+ people just like you are talking about what matters.
- Help others & share knowledge
- Earn cash & points
- Learn & ask questions
3-
2
5 Comments
Those are the so called Certificate Chain.
A certificate chain is a path of certificates leading from your certificate (the server certificate) to a trusted anchor (root CA, that should probably be AddTrustCARoot.crt).
For verifying a certificate, a computer needs to know the path from the server certificate until a root CA that he alreay trusts. By intalling those in your server, you allow your server to send them to your clients so they can construct the path and decide if they want to trust the root CA or not.
A certificate chain is a path of certificates leading from your certificate (the server certificate) to a trusted anchor (root CA, that should probably be AddTrustCARoot.crt).
For verifying a certificate, a computer needs to know the path from the server certificate until a root CA that he alreay trusts. By intalling those in your server, you allow your server to send them to your clients so they can construct the path and decide if they want to trust the root CA or not.
You can find detailed instruction for that here:
http://www.entrust.net/knowledge-base/technote.cfm?tn=8166
Just select Trusted root instead of intermediate certificate for the root CA
http://www.entrust.net/knowledge-base/technote.cfm?tn=8166
Just select Trusted root instead of intermediate certificate for the root CA
What about the Third Certificate? Would it be imported into the Trusted root as well and do we can have to change the extensions? PositivesSSLCA2.crt
Featured Post
Question has a verified solution.
If you are experiencing a similar issue, please ask a related question
This article will help to fix the below errors for MS Exchange Server 2013
I. Certificate error "name on the security certificate is invalid or does not match the name of the site"
II. Out of Office not working
III. Make Internal URLs and Externa…
There are times when we need to generate a report on the inbox rules, where users have set up forwarding externally in their mailbox. In this article, I will be sharing a script I wrote to generate the report in CSV format.
In this video we show how to create a Resource Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center.
Log into Exchange Admin Center.:
Navigate to the Recipients >> Resources tab.: "Recipients" is our default selection …
In this video we show how to create a mailbox database in Exchange 2013. We show this process by using the Exchange Admin Center.
Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center.
Navigate to the Servers >> Data…
Suggested Courses
Course of the Month1 day, 14 hours left to enroll
Earn Certification
MTA Server Fundamentals Exam 98-365
$59.00$53.10
717 members asked questions and received personalized solutions in the past 7 days.
Join the community of 500,000 technology professionals and ask your questions.