RE: SBS and ISa web publishing

Ok, will stay strait. You said that we can do our certificate with
certificate service. We can do a certificate with 2 CN. Will test it
tonight.

""Crina Li"" wrote:

> Hi David,
>
> Thank you for posting in SBS newsgroup.
>
> I appreciate your creative idea, but please be advised that Certificate
> Service is the recommended way to issue certificates. It can provide the
> full functionality of certificate issue and enable you to control the
> certificates with feasibility and convenience. SBS 2003 is calling some
> certificate related APIs to generate the certificate. It is doing the same
> as Certificate Service to generate certificates with these APIs. This is
> why you need not to install Certificate service on SBS 2003 for this
> certificate.
>
> Technically, I would recommend you use certificate service to issue
> certificates. If you insist on manually generate the certificate, according
> to my experience, you can use the MakeCert utility from .NET Framework
> Tools. However, I cannot guarantee the functionality as this is a
> development related issue. Your understanding on this is appreciated.
>
> For example, run the following command, you will be able to create a
> certificate whose common name is server.domain.com, localhost and server in
> the Personal certificate location of Local Machine. This certificate can be
> used for IIS SSL encryption in SBS 2003.
>
> makecert -sr localmachine -ss My -sk "SBS Self Sign Container" -pe -n
> CN=server.Domain.com,CN=localhost,CN=server -len 1024 -r -a sha1 -sp
> "Microsoft Base Cryptographic Provider v1.0" -sky exchange -b 01/01/2002 -e
> 01/01/2010
>
> For detailed command line reference, read the following articles:
>
> http://msdn.microsoft.com/library/en-us/cptools/html/cpgrfCertificateCreatio
> nToolMakecertexe.asp
> http://msdn.microsoft.com/library/en-us/security/security/makecert.asp
>
> This utility is included in .NET Framework SDK which can be downloaded
> from:
>
> .NET Framework SDK Version 1.1
> http://www.microsoft.com/downloads/details.aspx?familyid=9b3a2ca6-3647-4070-
> 9f41-a333c6b9181d
>
> In IIS6.0 you can also use SelfSSL.
>
> I hope this information helps.
>
> I am appreciated your time and look forward to hearing from you.
>
> Have a nice day.
>
> Best regards,
>
> Crina Li (MSFT)
>
> Microsoft CSS Online Newsgroup Support
>
> Get Secure! - www.microsoft.com/security
>
> =====================================================
> This newsgroup only focuses on SBS technical issues. If you have issues
> regarding other Microsoft products, you'd better post in the corresponding
> newsgroups so that they can be resolved in an efficient and timely manner.
> You can locate the newsgroup here:
> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
>
> When opening a new thread via the web interface, we recommend you check the
> "Notify me of replies" box to receive e-mail notifications when there are
> any updates in your thread. When responding to posts via your newsreader,
> please "Reply to Group" so that others may learn and benefit from your
> issue.
>
> Microsoft engineers can only focus on one issue per thread. Although we
> provide other information for your reference, we recommend you post
> different incidents in different threads to keep the thread clean. In doing
> so, it will ensure your issues are resolved in a timely manner.
>
> For urgent issues, you may want to contact Microsoft CSS directly. Please
> check http://support.microsoft.com for regional support phone numbers.
>
> Any input or comments in this thread are highly appreciated.
>
> =====================================================
>
> This posting is provided "AS IS" with no warranties, and confers no rights.
> --------------------
> | Thread-Topic: SBS and ISa web publishing
> | | From: "=?Utf-8?B?RGF2aWQ=?=" <David@xxxxxxxxxxxxxxxxxxxxxxxxx>
> | Subject: SBS and ISa web publishing
> | Date: Wed, 25 Jan 2006 12:59:03 -0800
> | | Newsgroups: microsoft.public.windows.server.sbs
> | |
> | The Wizard in SBS used self signed certificate for https web site. those
> | certificate have more then one CN.
> |
> | Is anybody know how to create certificate with more then one CN. I know
> | SelfSSL from the IIS resource kit, but I am not sure if we can to it with
> | this tool.
> |
> | I am trying to publish a CRM website with SSL and I want to replicate the
> | ways SBS is doing.
> |
>
>
.

Relevant Pages

  • RE: multiple SSL certificates
    ... biz public FQDN and want to use it for SBS server. ... you can not use both the self signed certificate and the new ... This newsgroup only focuses on SBS technical issues. ... | Subject: multiple SSL certificates ...
    (microsoft.public.windows.server.sbs)
  • RE: General Certificate Question
    ... Do you run SBS? ... If you do not run SBS, please repost your issue in Windows server newsgroup ... If you run SBS 2003, we do not need to buy 3rd-party certificate, the CEICW ...
    (microsoft.public.windows.server.sbs)
  • RE: Web Server Certificate page
    ... certificate and then type the public FQDN or public IP of SBS. ... If you still can not change the certificate when you rerun CEICW, ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • RE: Activesync wont work Please help
    ... Thank you for posting in the SBS newsgroup. ... I suggest that we follow the steps below to configure ActiveSync: ... on the "Web Server Certificate" page select "Create ... The client computer should be configured using the SBS Set Up Computer ...
    (microsoft.public.windows.server.sbs)
  • Re: Certifcate reset error - Need for mobile device connect
    ... That is why I am thinking of revoking the current GoDaddy certificate and removing the certificate from default and requesting a new one. ... Have you installed the GoDaddy cert on the SBS box yet yet? ... What I am trying to accopmlish is to have my SBS exchange server synch wireless with a Motorola Q phone. ... Manager packet from the SBS 2003 server to recreate the VPN connection. ...
    (microsoft.public.windows.server.sbs)