Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!
Domain Rename or other options?
Today, I just took on a new client running SBS2011. The prior IT firm setup their domain as xxx.local. As of 11/01/2015, their UCC SSL certificate will no longer be valid because it will no longer support .local domains. How do I rename the domain to a .com or are there other options available?
Do more with
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
You don't need to rename the domain.
Just get a new certificate with the correct external url.
mail.domain.com; autodiscover.domain.com; etc....
You then configure your DNS for the external name with the internal IP address.
Renaming a domain would be a nightmare and I believe it is unsupported.
The company I work for just bought another company where they did some Exchange installs with the exact same issue.
I'm just having them buy new certs with the correct SANs and do the proper configuration.
Just get a new certificate with the correct external url.
mail.domain.com; autodiscover.domain.com; etc....
You then configure your DNS for the external name with the internal IP address.
Renaming a domain would be a nightmare and I believe it is unsupported.
The company I work for just bought another company where they did some Exchange installs with the exact same issue.
I'm just having them buy new certs with the correct SANs and do the proper configuration.
@ScottCha - This sounds promising. Can you please provide more detailed instructions on the DNS configuration portion? Do you have a link or step-by-step guide for this?
Thanks!
Thanks!
Here's what I used to learn how to set the A and SRV records.
https://support.microsoft.com/en-us/kb/2772058
Use this to set 2010/2013 virtual directories.
http://www.itnotes.eu/?p=1904
I have something on the CNAME record...still looking that up.
These are good too.
http://blogs.technet.com/b/danielkenyon-smith/archive/2010/05/13/the-name-on-the-certificate-is-invalid-or-does-not-match-the-name-of-the-site-part-1.aspx
http://blogs.technet.com/b/danielkenyon-smith/archive/2010/05/13/the-name-on-the-certificate-is-invalid-or-does-not-match-the-name-of-the-site-part-2.aspx
Setting up OWA using SSL.
From <https://support.microsoft.com/en-us/kb/234022>
https://support.microsoft.com/en-us/kb/2772058
Use this to set 2010/2013 virtual directories.
http://www.itnotes.eu/?p=1904
I have something on the CNAME record...still looking that up.
These are good too.
http://blogs.technet.com/b/danielkenyon-smith/archive/2010/05/13/the-name-on-the-certificate-is-invalid-or-does-not-match-the-name-of-the-site-part-1.aspx
http://blogs.technet.com/b/danielkenyon-smith/archive/2010/05/13/the-name-on-the-certificate-is-invalid-or-does-not-match-the-name-of-the-site-part-2.aspx
Setting up OWA using SSL.
From <https://support.microsoft.com/en-us/kb/234022>
I think that's about it. The above information has me gotten 2 servers working with new certificates and the domain is still .local.
@ScottCha - Thanks for the info. I will look it over for the next day and respond back. Man, this looks like a ton of work.
The reading is the hard work. After I did my first one, the second was done in less than 30 minutes. That is after I fixed the autodiscover URL that I missed.
Just take your time and you'll be fine.
Certificates always seemed like black magic, even when I was an Exchange Engineer for MS. Once I got out in the real world and HAD to figure them out, they aren't so bad.
Just take your time and you'll be fine.
Certificates always seemed like black magic, even when I was an Exchange Engineer for MS. Once I got out in the real world and HAD to figure them out, they aren't so bad.
Here's a related EE post I worked on.
http://www.experts-exchange.com/questions/28735540/Exchange-2013-autodiscover-and-SSL-cert.html
http://www.experts-exchange.com/questions/28735540/Exchange-2013-autodiscover-and-SSL-cert.html
To the author. You DO NOT need to do all this work. Make sure that the SBS server has UR4 installed. Then from the SBS console, run The trusted third party certificate wizard. Specify that you want to renew. This will generate the required CSR. Then get your new cer. And install it using the same wizard. The CSR will not have the .local info in it
To everyone...I apologize for seemingly abandoning this question. I have had to travel all but one day since posting my original question. I am again heading back on the road for another three weeks. During this travel time, I will try to address the issue based on the suggested solutions. I will post back as soon as I can.
Premium Content
You need an Expert Office subscription to comment.Start Free Trial