Re: SSL and OWA

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance



Don't use metabase explorer just use IIS manager to import the cert.
If certs are not imported in correctly you will get the page cannot be
displayed. Also are you using selfssl cert for testing purposes? There
are limitations.

Self Generated versus Commercial SSL Certificates
http://www.sembee.co.uk/archive/2006/03/05/9.aspx


Understanding the Self-Signed Certificate in Exchange 2007
http://technet.microsoft.com/en-us/library/bb851554(EXCHG.80).aspx


James Chong (MVP)
MCITP | EMA; MCSE | M+, S+,
Security+, Project+, ITIL
msexchangetips.blogspot.com



On May 21, 10:49 am, Chris T. <Chr...@xxxxxxxxxxxxxxxxxxxxxxxxx>
wrote:
Last week, I attempted to assign a new certificate using SelfSSL to the
default website with the correct CN so we stop getting the security cert
warning.  Well, I used Metabase Explorer and assigned the new cert to the
correct Site 1 (I just wanted to make sure).  When I go into the properties
of the default site and select Directory Security.  I can view the
certificate and everything seems fine.  Here's the problem, it is not.  Once
I set the exchange virtual directory to use the certificate, I get a message
the "Internet Explorer cannot display the webpage".  If I change the
properties on the Exchange Virt Dir and take off ssl, I get the popup window
prompting for a userid and password.  Once entered, the OWA load and works
just fine.  Any help would be greatly appreciated.  BTW, the server is SBS
2003 and Exchange is 03 also.

I've also heard the I should rerun the internet connection wizard but I'd
really like to configure this without effecting anything else.  The
Sharepoint Services are also located on the web and working just great with
their own cert from SelfSSL.

Thanks,
Chris

.



Relevant Pages

  • Re: Outlook 2007 Certificate Error
    ... I did not get the UC/SAN cert since I didn't know what that meant, ... I know you can probably get away with a standard cert, such as what was used in Exchange 2003, and a few folks may respond that it works. ... Exchange 2007 UC/SAN Certificate ... If you name the internal domain the same as your Internet public domain name, in some time domain internal client will get the domain external IP. ...
    (microsoft.public.windows.server.sbs)
  • Re: Confusion RE: Transport Security Layer
    ... If you choose not to use Cert ... there are plenty of public certificate authorities out there. ... > server that requires TSL. ... >>>does this apply to Exchange 2K3. ...
    (microsoft.public.exchange.admin)
  • Re: Outlook 2007 Certificate Error
    ... I guess one of the problems is that the cert is for mail. ... Exchange 2007 needs a UC/SAN cert. ... Exchange 2007 UC/SAN Certificate ... If you name the internal domain the same as your Internet public domain ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS 2008 Port Forward Question
    ... What is a good source to understand the differences between SSL and UC/SAN certs and what I should be looking to buy vs. my $27 GoDaddy cert. ... How to Add a GoDaddy SSL Certificate in SBS ... Exchange 2007 does not work with such a certificate. ... internalname ...
    (microsoft.public.windows.server.sbs)
  • Re: Pocket PC 2003 - Can access OMA etc, but cannot sync with ActiveSync
    ... I think I originally imported the wrong cert from the workstation. ... of problem on SBS2k and Win2k where Exchange is in the default site and the ... I tried to install the certificate yesterday ...
    (microsoft.public.windows.server.sbs)