Avatar of bill2013
bill2013

asked on 

Creating a CSR for a Godaddy SSL for Exchange Server 2016 serving Outlook 2016 clients

I have had a problem with getting with setting up an Exchange Server 2016 to work with Outlook 2016 and the client PCs have been using a mixture of Outlook 2010 and 2013 until I had time to deal with this.

This seems to be a result of me being a mean little ****** and trying to get away with a single domain SSL instead of a SANS/UCC, which I will get today.

When I create a CSR for a new-named SSL, I see my previous settings were:

Outlook Web App (Internet) - mail.mydomain.com
Outlook Web App (Intranet) - mail.mydomain.com
OAB (Internet) - mail.mydomain.com
OAB (Intranet) - mail.mydomain.com
Exchange Web Services (Internet) - mail.mydomain.com
Exchange Web Services (Intranet) - mail.mydomain.com
Autodiscover (Internet) - autodiscover.mydomain.com
Autodiscover (Intranet) - mail.mydomain.com
POP- myexchangeserver
IMAP = myexchangeserver

Is this all correct? If so, I will simply replace mail.mydomain.com with exchange.mydomain.com,  and am I correct in believing I need a SANS/UCC - this would appear to be born out by the fact that it states based on your current selections the following domains will be created:

mydomain.com
mail.mydomain.com
AutoDiscover.mydomain.com
myexchangeserver

Thanks for any help.
ExchangeSSL / HTTPSEmail Servers

Avatar of undefined
Last Comment
bill2013
ASKER CERTIFIED SOLUTION
Avatar of M A
M A
Flag of United States of America image

Blurred text
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
Avatar of bill2013
bill2013

ASKER

Thanks MAS, so if I go for the following on the CSR (POP and IMAP will never be used on this server).

 Outlook Web App (Internet) - exchange.mydomain.com
 Outlook Web App (Intranet) - exchange.mydomain.com
 OAB (Internet) - exchange.mydomain.com
 OAB (Intranet) - exchange.mydomain.com
 Exchange Web Services (Internet) - .exchange.mydomain.com
 Exchange Web Services (Intranet) - exchange.mydomain.com
 Autodiscover (Internet) - autodiscover.mydomain.com
 Autodiscover (Intranet) - autodiscover.mydomain.com
 POP- myexchangeserver
 IMAP = myexchangeserver
Avatar of M A
M A
Flag of United States of America image

FYI you cannot use your internal FQDN anymore in your certificate.
You have to use your external names in certificate.
i.e. mail.domain.com and autodiscover.domain.com
Even POP and and  IMAP you have to your external names even internally.
Avatar of bill2013
bill2013

ASKER

I have already sent the CSR and received the SANS/UCC (5 domains) with the following settings:

 Outlook Web App (Internet) - exchange.mydomain.com
  Outlook Web App (Intranet) - exchange.mydomain.com
  OAB (Internet) - exchange.mydomain.com
  OAB (Intranet) - exchange.mydomain.com
  Exchange Web Services (Internet) - .exchange.mydomain.com
  Exchange Web Services (Intranet) - exchange.mydomain.com
  Autodiscover (Internet) - autodiscover.mydomain.com
  Autodiscover (Intranet) - autodiscover.mydomain.com
  POP- exchange.mydomain.com
  IMAP - exchange.mydomain.com

This created autodiscover.mydomain.com, exchange.mydomain.com, mydomain.com
Avatar of bill2013
bill2013

ASKER

thanks
Exchange
Exchange

Exchange is the server side of a collaborative application product that is part of the Microsoft Server infrastructure. Exchange's major features include email, calendaring, contacts and tasks, support for mobile and web-based access to information, and support for data storage.

213K
Questions
--
Followers
--
Top Experts
Get a personalized solution from industry experts
Ask the experts
Read over 600 more reviews

TRUSTED BY

IBM logoIntel logoMicrosoft logoUbisoft logoSAP logo
Qualcomm logoCitrix Systems logoWorkday logoErnst & Young logo
High performer badgeUsers love us badge
LinkedIn logoFacebook logoX logoInstagram logoTikTok logoYouTube logo