Exchange 2016 on premesis server need a certificate?

Does an on premises Exchange 2016 server that is integrated with Office 365 need to have a public certificate installed (just like how a stand along Exchange server requires a certificate)?
IT GuyNetwork EngineerAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

viktor grantExchange ServersCommented:
Hi,

Yes you need to use third party certificate. In orde to configure a hybrid deployment, you must use and configure certificates that you have purchased.

https://technet.microsoft.com/en-us/library/hh563848(v=exchg.150).aspx

Cheers
Viktor
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
timgreen7077Exchange EngineerCommented:
Viktor is correct. you do need a third party cert if you are in hybrid mode.
1
Jose Gabriel Ortega CastroCEOCommented:
Exchange server DO NEED a certificate.

Basically because all the Exchange traffic is using MAPI over HTTP and this need to be "encrypted" using a certificate.

Now, if you are going to integrate with O365 you need to buy an SSL certificate, with at least "2 SAN" (2 urls validated on the same domain). Goddady offers 1 URL or 5 or even more (suffering the COST of those), I have used Namecheap positive SSL wildcard certificates over 3 years without any issues.

About the details of the URL should be:
Mail.<domain.com>
autodiscover.<domain.com>

The 1st is for services like web services, OWA or ECP access.
and the 2nd one is for connecting services Like Outlook Anywhere, Mobile or phones, tablets and outlook clients.
1
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.