RE: Setting up a new OWA with SSL Support

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



Hi Brian,

Thanks for posting in our newsgroup.

Please let me know the following information so that I can reproduce your
issue?

1. What's the use of your new Http virtual terminal?
2. Do you have another Exchange server on network?
3. Give me the screen shot of the greyed out option for the ssl certificate.

I made a test on my test machine and get the same result.

1. Open Exchange System Manger.
2 Navigator to Domain (Exchange)'Servers'Protocals.
3. Right click HTTP and then create new http virtual server.
4. On the General tab, click Advanced, and then click Add, I found the TCP
port is 80 and SSL port is grey out. This seems to be by design.
5. On the Access tab, click Authentication, there are the following
authentication Methods:

Anonymous access
Basic authentication
Digest authentication for Windows domain servers
Integrated Windows Authentication

No option for SSL here.

6. Restart IIS.
7.On the new created Virtual Directory, on the website tab, the TCP port is
80 and SSL port is blank.
8. Click Advanced, I found the Mutiple SSL identities for this web site,
there is following information:
Default 443

Please send the information to v-robeli@xxxxxxxxxxxxx with subject:
-39489419-Setting up a new OWA with SSL Support.

I am look forward to hear from you.

If you need further assistance, please don't hesitate to let me know.

Best regards,

Robert Li(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================

This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
<Thread-Topic: Setting up a new OWA with SSL Support
<thread-index: AceokwU6lpG7/8u/TrmCMyUaU9FO8w==
<X-WBNR-Posting-Host: 207.46.19.197
<From: =?Utf-8?B?QnJpYW4gUGllc2lr?= <Brian Piesik@xxxxxxxxxxxxxxxxxxxxxxxxx>
<Subject: Setting up a new OWA with SSL Support
<Date: Wed, 6 Jun 2007 16:33:00 -0700
<Lines: 15
<Message-ID: <4127383F-1BAC-4181-A809-8570C6B09E95@xxxxxxxxxxxxx>
<MIME-Version: 1.0
<Content-Type: text/plain;
< charset="Utf-8"
<Content-Transfer-Encoding: 7bit
<X-Newsreader: Microsoft CDO for Windows 2000
<Content-Class: urn:content-classes:message
<Importance: normal
<Priority: normal
<X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
<Newsgroups: microsoft.public.windows.server.sbs
<Path: TK2MSFTNGHUB02.phx.gbl
<Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:42259
<NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
<X-Tomcat-NG: microsoft.public.windows.server.sbs
<
<Hello, I'm got a SBS2003R2 server and I'm attempting to setup a seperate
owa
<website than the one configure.
<
<When I go through the setup to create a new Http virtual terminal , the
<option for the ssl certificate is greyed out. I set the web address to be
<owa.domainname.com. Once completed I can see the new website in IIS
manager,
<go to it, install the SSL certficate on port 443. (Also I added a second
IP
<Address to this machine so no port conflicts). Certificate installs fine
and
<I can use authentication to go to either website.
<
<I go back into Exchange Manager and go to properties for the http virtual
<terminal, and go to the ip address, I still cannot set the SSL port. I
tried
<changing the authentication so it is forms based. Once done, I'm
assuming
<the wizard modifies the website to what has changed. The SSL certificate
is
<still installed, but now the website is no longer listening on an SSL Ports
<

.



Relevant Pages

  • Re: Mixed Mode Authentication in .net 2.0
    ... There are two parts to SSL, which is why this can be confusing. ... encryption and authentication of the server. ... ADFS supports a component called the federation service proxy which is ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • RE: Active Sync OMA http/1.1 500 error
    ... > use Basic Authentication for these three VD, disable SSL Windows ... > Microsoft CSS Online Newsgroup Support ... > This newsgroup only focuses on SBS technical issues. ... > | But by disabling it my OWA stopped to work. ...
    (microsoft.public.windows.server.sbs)
  • RE: SBS2003/ISA2004 question
    ... I hope to see you again in the newsgroup. ... Microsoft CSS Online Newsgroup Support ... |> SSL website located on the SBS Server and you want this SSL site to use ...
    (microsoft.public.windows.server.sbs)
  • Re: Search not working
    ... Management>Authentication Providers>Edit Authentication, does not provide the ... ability to indicate whether the web application is using SSL or not. ... I changed IIS Authentication for the web site back to Integrated ... I have installed an SSL certificate and required SSL ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Can SSL sessions be compromised?
    ... the proxy machine -- if I enable local cookies for authentication this ... your "SSL server" machine may be trying to catch some simple types of ... information carried by the digital certificates was ... clicking on any RFC number, brings up that RFC in the lower RFC summary ...
    (comp.security.misc)