Re: SSL Certificate on OWA server

From: Steve Carr (scarr_at_bastyr.edu.NOSPAM)
Date: 11/04/04 

Date: Thu, 4 Nov 2004 12:30:56 -0800

you can use a stand alone CA just fine if you'd like. Just treat the IIS
process as if you were going to send it off to Verisign. Take that cert text
file and go to your CA and process it and then take the resulting cert file
back to the IIS process. If you want to make the cert warning go away for
users you can publish the CA's cert so that people can add it to their
trusted root CA's in IE, etc and then all will be well.

"Ivan92" <Ivan92@discussions.microsoft.com> wrote in message
news:421E30FE-FDC7-4480-AC28-F30B9D95842D@microsoft.com...
> What is the best method to add a free certificate to the OWA server
(rather
> than making Verisign et all richer)?
> I built a standalone machine as a certification authority and created a
> certificate which is working ok (it works, but the annoying " ... was
issued
> by a company you have not chosen to trust ..." takes a few seconds to come
up
> and then the user has to click on Yes). - Article 297681 addresses this
> issue, but the question is:
> Should the certification authority be linked to AD or is it better to have
a
> standalone?
>
> I haven't had much luck with AD, as if I match the machine name, I can
issue
> the certificate no problem but then the certificate does not match the
alias
> name. If I try to issue it to the alias (email.company.com) then cert
auth
> in AD complains that it doesn't match any template - any suggestions on
this?
>

Relevant Pages

  • Re: how hard can it be?
    ... both ISA and IIS need 'a cert'. ... You cannot have SSL enabled in IIS ... I don't actually have an ISA to conveniently look at at the moment but the ... Am I correct that IIS OR ISA should have a certificate and not both. ...
    (microsoft.public.windows.server.sbs)
  • Trusted CA question
    ... I'm new to this certificate game so bear with me here: ... IIS box and named it 'www'. ... certificate services on the IIS box (at which point it issued it's own 'root ... CA' cert to itself, or so I've managed to ascertain) and then browsed to my ...
    (microsoft.public.win2000.security)
  • RE: netsh error - 1312
    ... I can issue a cert from the certsrv and make it work but ONLY if I log in as ... "there is no particular SSL certificate that can only be used ... IIS wizard provide a very convenient GUI for us to generate request. ...
    (microsoft.public.dotnet.framework.webservices)
  • Re: IIS 5.1 SSL Cetificate Missing
    ... To view certs that IIS can use you need to manually run MMC, add the Certificates snapin, point it to the Machine account, and then look in the Personal Certificate Store. ... If you want a certificate from that CA, then there's no need to join a domain and auto-enroll. ... Run through the wizard in IIS to create a certificate request file, or generate your own using certreq.exe. ... After issueing your cert, install it onto the IIS website on your XP box. ...
    (microsoft.public.inetserver.iis.security)
  • Re: SSL Certificate Cached?
    ... Have you try to remove the cert from IIS MMC? ... Try remove all certs then import the new cert using this method. ... How to Import a Server Certificate for Use in Internet Information Services ...
    (microsoft.public.inetserver.iis.security)