Re: Good book on SSL and Exchange

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Mark Arnold [MVP] (mark_at_mvps.org)
Date: 02/04/05 

Date: Fri, 04 Feb 2005 09:14:25 +0000

On Fri, 04 Feb 2005 07:41:13 +0200, Riccardo Moretti
<WhyBother@xyxyxyx.zxzxzxzxz.asasasa> wrote:

>I am looking for a good book on how to deploy exchange 2003 front end
>servers and how to set up secure access from the internet for these servers.
>
>What certs should I load where should I load the certificates
>how many certs do I need?
>
>If you use ISA do you need a cert there ?
>
>How does HW certs work?
>
>Do I create my own CA?
>
>Is there such a thing as a technical PKI ?
>
>Please help
>Riccardo

You don't need to waste your money on a book. Once you learn how to do
it and what the tweaks are you're there. www.isaserver.org and
www.msexchange.org will tell you how and what the tricks are.
If you are looking for a book in the wider context of Exchange
security then Henriks book "CYA" (you'll see it, trust me) is a good
option.

Relevant Pages

  • Re: Multiple web hosts and SSL
    ... It is possible to create a "wildcard" cert using the name *.domain.com ... though there may be some limitations on which browsers [or servers?] can use ... packs had problems with wildcard certs, until service pack 1 or later was ... The price is not the same as non-wildcard certificates... ...
    (microsoft.public.inetserver.iis.security)
  • Re: IE6 SSL Certificate Chain Verification
    ... The long and short of it is that the major CA players who had root certs ... The larger issue is that you could ultimately have keys with unlimited ... >I'm sure there are many many other servers on the net sending expired certificate chains. ...
    (Bugtraq)
  • Good book on SSL and Exchange
    ... servers and how to set up secure access from the internet for these servers. ... What certs should I load where should I load the certificates ...
    (microsoft.public.exchange2000.general)
  • Using Publ;ic SSL Cert on CAS servers
    ... We've got 2x exchange 2007 front end servers configured to use CAS and HT ... roles setup in an NLB cluster. ... To secure PDA's and OWA we've purchased from Entrust 2x Public Certificates ... We've installed one of the certs on one node to test but when connecting to ...
    (microsoft.public.exchange.admin)
  • Re: Using Publ;ic SSL Cert on CAS servers
    ... We've got 2x exchange 2007 front end servers configured to use CAS and HT roles setup in an NLB cluster. ... We've installed one of the certs on one node to test but when connecting to the node to use OWA we have the same error regarding having a certificate error. ... Our SAN names on the certs have only FQDN names of the servers and NLB cluster, do we need a single label name on the cert for this to work?. ...
    (microsoft.public.exchange.admin)