Link to home
Start Free TrialLog in
Avatar of pgm554
pgm554Flag for United States of America

asked on

Naming convention for Server 2016 Essentials SSL certificate.

Naming convention for Server 2016 Essentials SSL certificate.

Setting up a Server 2016 for remote user access.

I've set up sbs 2011 and usually I name the certificates using remote.myserver.com along with autodiscover.myserver.com when getting them from Godaddy.

So,my question is this still the way to go or is it different?
Avatar of DrDave242
DrDave242
Flag of United States of America image

It doesn't matter too much what specific name you choose, as long as the name on the certificate matches the fully-qualified domain name (FQDN) that will be used to connect to the server from outside. If your registered domain name is mycompany.com, for example, and you want users to connect to it using the name remote.mycompany.com, that should be the name on the certificate.

You may already know this, but you'll also need to use your registrar's DNS control panel to create a host (A) record with that name and the public IP address of the server in order for external users to be able to connect to it by that name.
If remote. has previously been in use, I tend to keep the name so that people don't have to remember a new name...

I have also for several clients who have somedomain.com, registered somedomainremote.com to be able to use www.somedomainremote.com as this has proved easier for some people to remember...
Avatar of pgm554

ASKER

Looks like the wizard automatically names the csr signing request remote.
So it looks like M$ does it for you.

Just as an add on ,do I need a SAN SSL since I'm not running Exchange on the box for an autodiscover?
And why can't I get 3 years on a new cert anymore?

I renewed one from Godaddy last Feb and was only presented with a two year extension.
ASKER CERTIFIED SOLUTION
Avatar of DrDave242
DrDave242
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
These days unless an EV cert is required, I frequently use letsencrypt  (on Windows as well as Linux).
Avatar of pgm554

ASKER

Not really an answer to original question ,but an answer none the less.