Re: OWA-SSL: Should I use 3rd party certificate or create own CA
From: Ben Winzenz [Exchange MVP] (ben_winzenz_at_NOSPAMdotmessageonedotcom)
Date: 12/02/04
- Next message: Ben Winzenz [Exchange MVP]: "Re: ADC on Server 2003 between Exchange 5.5!!!!"
- Previous message: TheSingingCat: "Re: Event ID 9409 - Should I be concerned?"
- In reply to: pepe: "Re: OWA-SSL: Should I use 3rd party certificate or create own CA"
- Next in thread: pepe: "Re: OWA-SSL: Should I use 3rd party certificate or create own CA"
- Reply: pepe: "Re: OWA-SSL: Should I use 3rd party certificate or create own CA"
- Messages sorted by: [ date ] [ thread ]
Date: Thu, 2 Dec 2004 15:09:19 -0600
You can also get rid of that prompt by installing that self-created cert
into the Trusted Root Certification Authority in IE. It works great if the
clients are using the same computers most of the time, but is a pain if they
will constantly be using different computers.
BTW - last time I checked, Thawte only charges ~180/yr for an SSL cert.
That's pretty cheap.
-- Ben Winzenz Exchange MVP "pepe" <pepe@discussions.microsoft.com> wrote in message news:7C2D8B08-44B4-4F41-BCD3-C2C59814A100@microsoft.com... > Even thought it proves me wrong:( > > Thank you for your responses :) > > > > > > "Paul Stephenson" wrote: > >> I agree. As long as you can train your users and tell them that the >> popup >> dialog box is expected and what to do I would use my own, but if you have >> a >> lot of people to train I would go third party just so you don't have to >> worry about the training issue. After all a cert is only a few hundred >> dollars, training never ends as new people come and go. The question to >> me >> then becomes "how much do you value your time at?" >> >> Paul >> >> >> >> "TheSingingCat" <meowmeowmeow@meowmeowmeowmeow.com> wrote in message >> news:41af7110$1@news.nucleus.com... >> > I use certificate server for 2003 and have our OWA clients come in >> > using >> SSL >> > with no issues. The only thing that will happen is the client's >> > browser >> > (afaik all ours are IE) display a warning that the Certificate is not >> > from >> a >> > trusted Authority. Press Yes to Continue. >> > >> > Then in they go to OWA and all is encyrpted. I just made sure our users >> knew >> > to expect this prior to accessing owa and have had no issues. They are >> > still able to view the certificate, it just says our company name on it >> etc. >> > I think for corporate users this isn't a big issue, if you had the >> > general >> > public coming in to your site, then it would probably ease their minds >> > if >> > the certificate was from a trusted source such as VeriSign or Thwart >> > (sp?) >> > etc. >> > >> > tsc >> > >> > >> > "pepe" <pepe@discussions.microsoft.com> wrote in message >> > news:68BD4579-19C4-4058-AC42-DA39A0A88421@microsoft.com... >> > > My partner and I are debating the use of a third party certificate >> > > (like >> > > Verisign) or the creation of our own Certificate Authority. We want >> > > our >> > > users >> > > to access OWA via ssl. >> > > >> > > I thought we should use third part certs because then we wouldn't >> > > have >> to >> > > worry about browsers having or not having our public key. I thought >> > > we >> > > would >> > > have to install that key on each machine that someone wanted to use >> > > to >> > > access >> > > OWA. >> > > >> > > My partner thinks that we could create our own CA using Windows 2000 >> > > server >> > > and create the certs. He believes that IE would already have the >> > > public >> > > key >> > > for certs created by our MS CA. >> > > >> > > Could someone explain why I am right or he is right. >> > > >> > > Don't worry. No egos will get bruised here. >> > > >> > > Thanks, >> > > Pepe >> > >> > >> >> >>
- Next message: Ben Winzenz [Exchange MVP]: "Re: ADC on Server 2003 between Exchange 5.5!!!!"
- Previous message: TheSingingCat: "Re: Event ID 9409 - Should I be concerned?"
- In reply to: pepe: "Re: OWA-SSL: Should I use 3rd party certificate or create own CA"
- Next in thread: pepe: "Re: OWA-SSL: Should I use 3rd party certificate or create own CA"
- Reply: pepe: "Re: OWA-SSL: Should I use 3rd party certificate or create own CA"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
