Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

Certificate Basics for Small business server 2011

Posted on 2016-10-17
4
39 Views
Last Modified: 2016-11-06
HI all,

Im new to installing an actual real certificate on a server and am not sure how to go about it. I know how to actually install it, its just the topology is confusing me

I have a registered domain which lest say is abc.com
I have a mail server on hosted in my office which is using a dynamic ip. I have registered a hos name with no-ip which lets say is abc.ddns.net
The mx records for abc.com point to abc.ddns.net
Everything works fine.
In attempt to get rid of errors associated with self signed certificates i thought i would try and install a certificate, however im not sure how i order this certificate under this topology.

When i generate the request, as the SBS server is set up with the external domain of abc.com, it generates the certificate request with the common name of remote.abc.com. However users will actually connect to the server by entering abc.ddns.net. Will this cause a problem?

Any advice for this scenario welcome
0
Comment
Question by:Michael
  • 2
4 Comments
 
LVL 80

Assisted Solution

by:David Johnson, CD, MVP
David Johnson, CD, MVP earned 250 total points (awarded by participants)
ID: 41847643
yes it will generate an error as the name doesn't match the name on the certificate
0
 
LVL 35

Expert Comment

by:Cris Hanna
ID: 41848080
Is there a reason they can't get a static in?

My only other thought would be that go to external DNS records  and modify the A record for remote. domain. com to point to abc. does.net
0
 
LVL 63

Accepted Solution

by:
Simon Butler (Sembee) earned 250 total points (awarded by participants)
ID: 41848727
I have done this loads of times. Ran my own Exchange server with a dynamic IP for three years (no other choice at the time).

Using the domain that you own, create a CNAME for remote.example.com and put it on the DNS of the dynamic IP address provider (site.dyndns.com). You can do the same for Autodiscover.example.com. Not exactly best practise because it involves an additional DNS lookup, but for an SBS server it should be fine.
Then request an SSL certificate for remote.example.com in the usual way.

With SBS 2011 though, it has to be done in a certain way to work properly.
Create the certificate request through Exchange, not SBS. That way you can include remote.example.com and Autodiscover.example.com (using a UC type certificate). Then once you have received the response and completed it, use the SBS certificate wizard, choosing the option to use an existing SSL certificate.

http://exchange.sembee.info/2010/install/ssl-sbs2011.asp
0
 
LVL 80

Expert Comment

by:David Johnson, CD, MVP
ID: 41876001
Sembee's answer fixes the problem
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Since pre-biblical times, humans have sought ways to keep secrets, and share the secrets selectively.  This article explores the ways PHP can be used to hide and encrypt information.
Learn to move / copy / export exchange contacts to iPhone without using any software. Also see the issues in configuration of exchange with iPhone to migrate contacts.
In this video we show how to create a Resource Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: Navigate to the Recipients >> Resources tab.: "Recipients" is our default selection …
The video tutorial explains the basics of the Exchange server Database Availability groups. The components of this video include: 1. Automatic Failover 2. Failover Clustering 3. Active Manager

808 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question