RE: multiple SSL certificates
- From: v-crinal@xxxxxxxxxxxxxxxxxxxx ("Crina Li")
- Date: Fri, 11 Aug 2006 07:32:47 GMT
Hi Tim,
Thank you for posting in SBS newsgroup.
From your description, I understand the issue to be: You have registeredbiz public FQDN and want to use it for SBS server. If I have misunderstood
your concerns, please do not hesitate to let me know.
As I know, you can not use both the self signed certificate and the new
certificate at the same time. You can rerun CEICW to configure new
certificate and then you can access OWA or RWW using https://new FQDN of
SBS/exchange or https://new FQDN of SBS/remote to install new certificate
and then reconfigure RPC over HTTP on remote client.
I also provide the detailed steps for your reference:
1. On the SBS 2003 Server open the Server Management console. Go to
Standard Management\To Do List.
2. Click the "Connect to the Internet" link.
3. Choose not to change the connection type and click Next. On the Firewall
page, select "Enable firewall" and click Next.
4. On the "Services Configuration" page, select all the items and then
click Next.
5. On the "Web Services Configuration" page, make sure "Allow access to the
entire Web site from the Internet" is selected. If you select "Allow access
to only the following Web site services from the Internet", make sure
Windows SharePoint Services intranet site,OWA and RWW are selected. Click
Next.
6. On the "Web Server Certificate" page, choose to create a new Web server
certificate and then type the public FQDN of SBS.
7. Go through the remaining steps.
8. If you have a router or hardware firewall, configure it to forward
inbound traffic on TCP port 80 and 443 to the SBS server's external
address.
9. Then you can access OWA, RWW and companyweb through typing
https://FQDN/exchange, https://FQDN/remote and https://FQDN:444 from
internet.
You may also refer to the following KB article:
825763 How to configure Internet access in Windows Small Business Server
2003
http://support.microsoft.com/?id=825763
If you have any questions or concerns regarding the issue, please do not
hesitate to let me know.
I appreciate your time and look forward to hearing from you.
Best regards,
Crina Li (MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| From: timyoder@xxxxxxxxx
| Newsgroups: microsoft.public.windows.server.sbs
| Subject: multiple SSL certificates
| Date: 10 Aug 2006 12:50:45 -0700
| Organization: http://groups.google.com
| Lines: 23
| Message-ID: <1155239445.025826.204740@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
| NNTP-Posting-Host: 72.245.50.52
| Mime-Version: 1.0
| Content-Type: text/plain; charset="iso-8859-1"
| X-Trace: posting.google.com 1155239449 26474 127.0.0.1 (10 Aug 2006
19:50:49 GMT)
| X-Complaints-To: groups-abuse@xxxxxxxxxx
| NNTP-Posting-Date: Thu, 10 Aug 2006 19:50:49 +0000 (UTC)
| User-Agent: G2/0.2
| X-HTTP-UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US;
rv:1.8.0.6) Gecko/20060728 Firefox/1.5.0.6,gzip(gfe),gzip(gfe)
| Complaints-To: groups-abuse@xxxxxxxxxx
| Injection-Info: m79g2000cwm.googlegroups.com; posting-host=72.245.50.52;
| posting-account=s50QTw0AAAAlUW549xnA8Nzv9TlGhgTK
| Path:
TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTFEEDS02.phx.gbl!newsfeed.c
w.net!cw.net!news-FFM2.ecrc.de!news.glorb.com!postnews.google.com!m79g2000cw
m.googlegroups.com!not-for-mail
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:288722
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| This may be a really dumb question, but if so it will require a very
| short answer.
|
| Right now I have OWA and RPC over HTTP configured using a self-signed
| SSL certificate and a DynDNS static registration (yes, this is for a
| static IP). Recently I decided to jump online and snag up the .biz
| extension for one of our company's domain names along with a credit for
| an SSL registration. I want to transition from the old domain/self
| signed SSL to the other domain/SSL as painlessly as possible. I will
| need to reconfigure the RPC over HTTP for some remote/travelling users
| but I don't want to make it so that they all go dead at once.
|
| In other words, I want to have both the self signed certificate and the
| new certificate active at the same time so that I can change remote
| users over as they are available rather than cutting them all off at
| once until I get things changed over.
|
| Is this possible?
|
| Thanks in advance,
|
| Tim
|
|
.
- References:
- multiple SSL certificates
- From: timyoder
- multiple SSL certificates
- Prev by Date: Re: lost sharepoint, installing SQL
- Next by Date: RE: Catalog database error
- Previous by thread: Re: multiple SSL certificates
- Next by thread: Re: multiple SSL certificates
- Index(es):
Relevant Pages
|