Re: Web certificates

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



My advice? Don't issue a self-signed cert. I'd recommend purchasing one
from an existing CA on the Internet. Many can be had for quite cheap
nowadays (less than $100). If you use a self-signed cert, every single
client computer that wants to access OWA or RPC/HTTP will have to install
the cert (required for RPC/HTTP), or deal with the nasty warning messages
that pop up identifying it as a cert that isn't trusted.

Just to a search for SSL certificate, and you ought to find plenty of
options. Once you get the cert, you should be able to install the same cert
on both the ISA server and your Exchange Front-end server (if you have one).

--
Ben Winzenz
Exchange MVP
MessageOne
Read my blog!
http://winzenz.blogspot.com
http://feeds.feedburner.com/winzenz (RSS Feed)


"yba02" <yba02@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:CBA42F5C-8961-414E-A382-F89CABBBEA9D@xxxxxxxxxxxxxxxx
Hi,
ISA 2004 and Exchange 2003 are on two different boxes. For the purpose of
enabling remote email services (OWA and RPCoHTTP), I need to setup
certificates services on either server so to issue certificates to secure
remote-to-Exchange transmission.
Are there any known recommendations against what I plan to do. If not,
which is a better candidate?
Thanks
Yba.


.



Relevant Pages

  • Trying to connect to Active Directory via LDAPS
    ... I have a need to connect securely to AD via LDAP. ... My AD Server appears to have both a self-signed cert and a purchased cert ...
    (microsoft.public.windows.server.active_directory)
  • RE: IIS Key pairs (how to export an IIS 4.0 self-issued Root CA a nd import into new IIS 4.0 box)
    ... it prompts the user for what client cert they want to use to connect to the ... it issues client certificates to the end users. ... Step I - Installing the New Server ... Install NT SP 3 ONLY ...
    (Focus-Microsoft)
  • Re: ActiveSync error 0x85010004 from Windows Mobile 6 to SBS 2003
    ... I found a link suggesting a test of the OMA using a desktop browser by ... the server and from the phone. ... I then reinstalled the cert, ... Before installing the cert, I could ...
    (microsoft.public.windows.server.sbs)
  • RE: Certificate logon on Unix
    ... I don't know of any package but there is prolly one out there you should ... The good news is that getting fulle client ... and server side authentication is pretty easy so it will work as a quick ... setup your CA and make the root cert Pbk available to everyone. ...
    (Security-Basics)
  • Re: SSL certificates
    ... Should I just create a new self signed cert for StartTLS? ... self-signed certificate to advertise StartTLS to internet Server to Server ... Also I am trying to see how the send/recieve connectors FQDN play a part ...
    (microsoft.public.exchange.admin)