RE: Multiple Public Domains on 1 SBS Certificate

Hi Fred,

Thanks for your update.

Nevertheless who control your external DNS server, those five A records are
added in the internet DNS server, it is correct. Please feel free to post
back when you need further assistance.

I am happy to be assistance of you and look forward to your reply!

Have a nice day!

Sincerely,

Jenny Wu
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
>Thread-Topic: Multiple Public Domains on 1 SBS Certificate
>thread-index: AcXq/l6LfhdDVuUrQD6MgRvteRbQbA==
>X-WBNR-Posting-Host: 206.47.27.57
>From: "=?Utf-8?B?RnJlZCBBbmRyZW9uZQ==?="
<FredAndreone@xxxxxxxxxxxxxxxxxxxxxxxxx>
>References: <A5D472CC-F4F6-49EB-A6F8-9D5F2F7EE100@xxxxxxxxxxxxx>
<MHIGg4m6FHA.1236@xxxxxxxxxxxxxxxxxxxxx>
<971AE704-354B-453B-9179-1CE8A1ED2E74@xxxxxxxxxxxxx>
<uHcqqEr6FHA.3472@xxxxxxxxxxxxxxxxxxxxx>
>Subject: RE: Multiple Public Domains on 1 SBS Certificate
>Date: Wed, 16 Nov 2005 14:37:47 -0800
>Lines: 274
>Message-ID: <D620A4DF-717D-4468-9D63-5DE1F38A1689@xxxxxxxxxxxxx>
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 7bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA03.phx.gbl
>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:222999
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>Thanks Jenny:
>I think you misunderstoood. I control online, through my Registrar, my own
>NS and MX records that point to the physical web site. Therefore I do not
>have to get the ISP involved.
>
>Since I had reposted this message prior to your answer and Javier Gomez
has
>replied please close off this issue and I will continue my thread with him.
>
>""Jenny wu [MSFT]"" wrote:
>
>> Hi Fred,
>>
>> Thanks for your update! I am happy to work with you.
>>
>> For you want to external users can access your web site using multiple
>> public FQDNs, you need let you ISP to add the five public FQDN records
to
>> the one web site. We can not do this process, you can contact your ISP
and
>> they will know how to do that.
>>
>> The DNS server installed on the SBS server is our internal DNS server,
it
>> controls internal resolution not internet resolution. You can safely
delete
>> these public FQDN records of the DNS server.
>>
>> You just need run one time CEICW to create one certificate for the web
>> site. After you run the wizard, the certificate has been applied to the
web
>> site and we need not manually import it.
>>
>> I appreciate your time. If you have any further concern on the issue
please
>> let me know. I am happy to be assistance of you!
>>
>> Have a nice day!
>>
>> Sincerely,
>>
>> Jenny Wu
>> Microsoft CSS Online Newsgroup Support
>> Get Secure! - www.microsoft.com/security
>> ======================================================
>> This newsgroup only focuses on SBS technical issues. If you have issues
>> regarding other Microsoft products, you'd better post in the
corresponding
>> newsgroups so that they can be resolved in an efficient and timely
manner.
>> You can locate the newsgroup here:
>> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
>>
>> When opening a new thread via the web interface, we recommend you check
the
>> "Notify me of replies" box to receive e-mail notifications when there
are
>> any updates in your thread. When responding to posts via your
newsreader,
>> please "Reply to Group" so that others may learn and benefit from your
>> issue.
>>
>> Microsoft engineers can only focus on one issue per thread. Although we
>> provide other information for your reference, we recommend you post
>> different incidents in different threads to keep the thread clean. In
doing
>> so, it will ensure your issues are resolved in a timely manner.
>>
>> For urgent issues, you may want to contact Microsoft CSS directly.
Please
>> check http://support.microsoft.com for regional support phone numbers.
>>
>> Any input or comments in this thread are highly appreciated.
>> ======================================================
>> This posting is provided "AS IS" with no warranties, and confers no
rights.
>>
>> --------------------
>> >Thread-Topic: Multiple Public Domains on 1 SBS Certificate
>> >thread-index: AcXqc9LmIyIznciDRTCNO8J5TDPlGA==
>> >X-WBNR-Posting-Host: 64.230.18.42
>> >From: "=?Utf-8?B?RnJlZCBBbmRyZW9uZQ==?="
>> <FredAndreone@xxxxxxxxxxxxxxxxxxxxxxxxx>
>> >References: <A5D472CC-F4F6-49EB-A6F8-9D5F2F7EE100@xxxxxxxxxxxxx>
>> <MHIGg4m6FHA.1236@xxxxxxxxxxxxxxxxxxxxx>
>> >Subject: RE: Multiple Public Domains on 1 SBS Certificate
>> >Date: Tue, 15 Nov 2005 22:06:03 -0800
>> >Lines: 159
>> >Message-ID: <971AE704-354B-453B-9179-1CE8A1ED2E74@xxxxxxxxxxxxx>
>> >MIME-Version: 1.0
>> >Content-Type: text/plain;
>> > charset="Utf-8"
>> >Content-Transfer-Encoding: 7bit
>> >X-Newsreader: Microsoft CDO for Windows 2000
>> >Content-Class: urn:content-classes:message
>> >Importance: normal
>> >Priority: normal
>> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>> >Newsgroups: microsoft.public.windows.server.sbs
>> >NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>> >Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA03.phx.gbl
>> >Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:222680
>> >X-Tomcat-NG: microsoft.public.windows.server.sbs
>> >
>> >Hi Jenny:
>> >
>> > I have read many of your posts on Certificates, therefore I am glad
you
>> >have added your thoughts to this problem.
>> >
>> >Your points are correct
>> >
>> >1) I have one physical server with one Web site that I wish to have a
>> >Certificate that has 5 FQDNs on that ONE Certificate.
>> >
>> >2) I want want external users access one web site use any public FQDN
of
>> >the five public FQDN?
>> >
>> >3) I want to be able to create that ONE certificate with the tools of
SBS
>> 2003
>> >
>> >I do not quite understand your point
>> >
>> > You can contact your ISP to add the five public FQDN records to the
one
>> web
>> >site and apply one certificate to it.
>> >
>> >At present I control the DNS entries for all 5 FQDNs and they point to
the
>> >correct IP for the physical site. Did you mean something else?
>> >
>> >Kinid regards
>> >Fred
>> >
>> >
>> >""Jenny wu [MSFT]"" wrote:
>> >
>> >> Hi Fred,
>> >>
>> >> Thanks for using the newsgroup!
>> >>
>> >> For your description, I understand that you want to know if multiple
>> public
>> >> FQDN and multiple certificates can apply to web site and external
users
>> can
>> >> access the web site use one FQDN and get the corresponding
certificate.
>> If
>> >> I am off base, please don't hesitate to let me know.
>> >>
>> >> Before we go further, could you kindly help me confirm some
information
>> to
>> >> isolate the issue?
>> >> 1. How many web sites you have? Do you want to apply all five
>> certificates
>> >> to one web site?
>> >> 2. Do you want external users access one web site use any public FQDN
of
>> >> the five public FQDN?
>> >>
>> >> One thing need to clarify that one web site can be only applied one
>> >> certificate, but can be accessed by multiple public FQDN. If you want
to
>> >> access one web site use multiple FQDN and get the corresponding
>> >> certificate, you can create some web sites which content is the same
>> with
>> >> the web site and then publish them to internet with different public
>> FQDN.
>> >> And apply the corresponding certificate to the web site. In that way,
>> >> external users can access the web site using different FQDN to get
>> >> different certificate. However it may not be necessary. You can
contact
>> >> your ISP to add the five public FQDN records to the one web site and
>> apply
>> >> one certificate to it.
>> >>
>> >> Hope above information helps! If you have any further concern or
>> question
>> >> on the issue please let me know. I am look forward to your update.
>> >>
>> >> Have a nice day!
>> >>
>> >> Sincerely,
>> >>
>> >> Jenny Wu
>> >> Microsoft CSS Online Newsgroup Support
>> >> Get Secure! - www.microsoft.com/security
>> >> ======================================================
>> >> This newsgroup only focuses on SBS technical issues. If you have
issues
>> >> regarding other Microsoft products, you'd better post in the
>> corresponding
>> >> newsgroups so that they can be resolved in an efficient and timely
>> manner.
>> >> You can locate the newsgroup here:
>> >> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
>> >>
>> >> When opening a new thread via the web interface, we recommend you
check
>> the
>> >> "Notify me of replies" box to receive e-mail notifications when there
>> are
>> >> any updates in your thread. When responding to posts via your
>> newsreader,
>> >> please "Reply to Group" so that others may learn and benefit from
your
>> >> issue.
>> >>
>> >> Microsoft engineers can only focus on one issue per thread. Although
we
>> >> provide other information for your reference, we recommend you post
>> >> different incidents in different threads to keep the thread clean. In
>> doing
>> >> so, it will ensure your issues are resolved in a timely manner.
>> >>
>> >> For urgent issues, you may want to contact Microsoft CSS directly.
>> Please
>> >> check http://support.microsoft.com for regional support phone numbers.
>> >>
>> >> Any input or comments in this thread are highly appreciated.
>> >> ======================================================
>> >> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>> >>
>> >> --------------------
>> >> >Thread-Topic: Multiple Public Domains on 1 SBS Certificate
>> >> >thread-index: AcXpivJjBu3q5FKDS/KsGlMNm2tbqw==
>> >> >X-WBNR-Posting-Host: 64.230.22.11
>> >> >From: "=?Utf-8?B?RnJlZCBBbmRyZW9uZQ==?="
>> >> <FredAndreone@xxxxxxxxxxxxxxxxxxxxxxxxx>
>> >> >Subject: Multiple Public Domains on 1 SBS Certificate
>> >> >Date: Mon, 14 Nov 2005 18:19:03 -0800
>> >> >Lines: 35
>> >> >Message-ID: <A5D472CC-F4F6-49EB-A6F8-9D5F2F7EE100@xxxxxxxxxxxxx>
>> >> >MIME-Version: 1.0
>> >> >Content-Type: text/plain;
>> >> > charset="Utf-8"
>> >> >Content-Transfer-Encoding: 7bit
>> >> >X-Newsreader: Microsoft CDO for Windows 2000
>> >> >Content-Class: urn:content-classes:message
>> >> >Importance: normal
>> >> >Priority: normal
>> >> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>> >> >Newsgroups: microsoft.public.windows.server.sbs
>> >> >NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>> >> >Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA03.phx.gbl
>> >> >Xref: TK2MSFTNGXA02.phx.gbl
microsoft.public.windows.server.sbs:222259
>> >> >X-Tomcat-NG: microsoft.public.windows.server.sbs
>> >> >
>> >> >The current SBS certificate generated by CEICW contains 1 public DNS
>> name,
>> >> >plus multiple private DNS names.
>> >> >
>> >> >Presently the SBS2k3 Standard SP1 EXSP2 2 nics and RV042 router is
>> >> >responding to 5 Public DNS names succesfully. Mail for the Pulic Dns
>> names
>> >> is
>> >> >handled properly by Exchange.
>> >> >
>> >> >The only problem is that the certificates sent to web clients do not
>> >> confirm
>> >> >that the server DNS name is the same as the DNS name requested.
>> >> >
>> >> >Example the server Certificate is set by CEICW to
>> >> >mycompamy.com
>> >> >
>> >> >All of the following requests indicate a certificate mismatch
>> >> >
>> >> >www.mycompany.com
>> >> >mail.mycompany.com
>> >> >mycompany.ca
>> >> >www.mycompany.ca
>> >> >mycompany.org
>> >> >www.mycompany.org
>> >> >
>> >> >Unfortunately, CEICW does not allow the entry of multiple FQDN's.
>> Editing
>> >> >the VBS file generated by CEICW does not allow additonal names to be
>> added.
>> >> >
>> >> >Creating a certificate with multiple FQDN's requests in Security Tab
of
>> >> the
>> >> >web site then importing it into Certfiicate manager does not create
the
>> >> right
>> >> >CN's.
>> >> >
>> >> >Can anyone explain how to create a self-registered certificate with
>> >> multiple
>> >> >FQDN's. This should be a fairly normal occurance for small business.
>> >> >
>> >> >Many thanks in advance
>> >> >Fred
>> >> >
>> >> >
>> >>
>> >>
>> >
>>
>>
>

.

Relevant Pages

  • RE: http://companyweb /remote /backup /Monitoring HELP
    ... entire Web site from the Internet" is selected. ... On the "Web Server Certificate" page, choose to create a new Web server ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • RE: SBS2003, Mobile 5 and multiple certificates
    ... we do not recommend to create another web site like your CSR to ... If you want to install a 3rd-party certificate on SBS, ... Microsoft does not guarantee ...
    (microsoft.public.windows.server.sbs)
  • RE: Remote Workplace and companyweb problems
    ... wizard will create certificate for the RWW web site and you can access RWW ... On the SBS 2003 Server open the Server Management console. ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS2003, Mobile 5 and multiple certificates
    ... because the certificate signing request was generated via the CSR ... 3rd-party certificate on SBS to use for mobile 5 device. ... we do not recommend to create another web site like your CSR to ... Microsoft does not guarantee ...
    (microsoft.public.windows.server.sbs)
  • RE: can I create a new certificate on ISA 2004/SBS 2003
    ... by default the SSL website such as OWA/RWW is bound to ... the predefined certificate issued by the CEICW Wizard. ... expand the Web Sites node and click the SSL Web Site. ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
Loading