[isalist] Re: Certificates for publishing Exchange 2007 with ISA Server 2006
- From: Jim Harrison <Jim@xxxxxxxxxxxx>
- To: "isalist@xxxxxxxxxxxxx" <isalist@xxxxxxxxxxxxx>
- Date: Wed, 8 Apr 2009 22:09:54 -0700
http://www.ISAserver.org
-------------------------------------------------------
Where you create the certificate request is irrelevant as long as you create a
request file acceptable to the issuer an appropriate to your needs. They can
best guide you in that regard.
Whether you can use the same certificate at ISA and Exchange is a licensing
question; nothing more.
As long as you use ISA 2006 SP1, the SAN data is not a factor.
Jim
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Raji Arulambalam
Sent: Wednesday, April 08, 2009 8:09 PM
To: [ISAserver Discussion List]
Subject: [isalist] Certificates for publishing Exchange 2007 with ISA Server
2006
http://www.ISAserver.org
-------------------------------------------------------
Hi
We have been using a self signed SAN certificate installed on the Exchange and
ISA servers. This has worked well with only non-domain member machines and
mobile active-sync users complaining about the certificates.
The ISA server is a member of the internal domain.
We now want to purchase a 3rd party SAN certificate and my questions are
- can we use separate certificates for communication between external users,
ISA and Exchange servers
- can we use the 3rd party certificate on the ISA server listener for external
users only and then use the self-signed certificate for communication between
ISA and Exchange server.
- if it is then where do I create the certificate request from - Exchange
server or ISA server?
The SAN certificate contains:
webmail.domain.net
autodiscover.domainb.net
exch01.domain.local
exch01
The autodiscover domain is our email address domain.
Thanks
Raji A
Email disclaimer: This email and any attachments are confidential. If you are
not the intended recipient, do not copy, disclose or use the contents in any
way. If you receive this message in error, please let us know by return email
and then destroy the message. Environment Bay of Plenty is not responsible for
any changes made to this message and/or any attachments after sending.
******************************************************
This e-mail has been checked for viruses and none detected.
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
