asked on 1/23/2016

Exchange 2013 Local SSL Certificate

Hi

We have an SSL certificate for our public server name (mail.domain.co.uk) however we can't have one for the local server name (EX01.domain.local).

Is there a way to update it so it uses the public server name? Or how do we set it up to issue a trusted local SSL certificate host so it can issue it's own SSL certificate for EX01.domain.local?

Cheers
Dom

Exchange SSL / HTTPS

Last Comment

Hello World

1/24/2016

Matt Minor

1/24/2016

Redirection to the external DNS name is possible. I have used a tool from DigiCert in the past to perform this operation and with great success. It takes a bit of patience to get everything fully sorted once the change is made, but personal experience has been that the process is relatively painless.

Verify a good backup is available of your exchange server/database prior to performing any maintenance or upgrades!

The tool and instructions are found here:
https://www.digicert.com/internal-domain-name-tool.htm

Be aware that there may be some Outlook client connectivity certificate issues during the process, so perhaps plan to do this during a scheduled maintenance window. Definitely not something I'd want to do during regular business-hours.

**Be familiar with the instructions prior to running the tool. Don't just run it and hope for the best.**

ASKER CERTIFIED SOLUTION

Seth Simmons

1/24/2016

THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.

View this solution by signing up for a free trial.

Members can start a 7-Day free trial and enjoy unlimited access to the platform.

See Pricing Options

Start Free Trial

Hello World

1/24/2016

Hi,
Since .local don't support used in public certificate now, we need deploy split DNS by creating a new DNS zone in your environment, i.e mail.contoso.com.

Then add new accepted domain and email address policy, configure all virtual directory URL with mail.contoso.com, and re-new certificate with SAN mail.contoso.com.