[isalist] Re: ISA 2006 SP1 and Exchange 2007 SP1
- From: "Andy Haigh" <ahaigh@xxxxxxxxxxxxxxxx>
- To: <isalist@xxxxxxxxxxxxx>
- Date: Thu, 5 Feb 2009 02:26:54 +1100
http://www.ISAserver.org
-------------------------------------------------------
The phone has the latest firmware from HTC for the provider so no help
there... Optus in Australia.
Just have to hope the newer devices have the correct Intermediate and
Root certs installed.
Thanks All
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Amy Babinchak
Sent: Thursday, 5 February 2009 12:13 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: ISA 2006 SP1 and Exchange 2007 SP1
http://www.ISAserver.org
-------------------------------------------------------
Did you install the updates from the service provider?
Love those iPhones, eh? Actually you don't even need a certificate. They
don't care about security. You'll just get a warning message once and it
will ignore any problems from then on.
thanks,
Amy Babinchak
Harbor Computer Services | 248-850-8616
Mobile 248-890-1794
Web http://www.harborcomputerservices.net
Client Blog http://smalltechnotes.blogspot.com
Tech Blog http://securesmb.harborcomputerservices.net
Buy My House: http://www.shannonrealty.com/vassar_mls_tour.html
Are you an IT Pro? http://www.thirdtier.net
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Andy Haigh
Sent: Wednesday, February 04, 2009 6:39 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: ISA 2006 SP1 and Exchange 2007 SP1
http://www.ISAserver.org
-------------------------------------------------------
Ok, I have had to install their Intermediate CA certificates on the
phones to get these certificates to work.
So much for their certificates being compatible with WM6. Unless it's
the phone manufacturer to blame?
The iPhone's we have tested don't like the cert either but they just
allow you to continue anyway!
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Thomas W Shinder
Sent: Sunday, 1 February 2009 2:17 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: ISA 2006 SP1 and Exchange 2007 SP1
http://www.ISAserver.org
-------------------------------------------------------
:)
It had to do with reinstalling intermediate CA certificates. I'll hunt
it down and post the info (no quid pro quo required)
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Jim Harrison
Sent: Saturday, January 31, 2009 8:45 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: ISA 2006 SP1 and Exchange 2007 SP1
http://www.ISAserver.org
-------------------------------------------------------
Careful now - this is a family list...
:-p
JimmyJoeBob Alooba
Office 2007 on Win7 Beta
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Andy Haigh
Sent: Friday, January 30, 2009 9:27 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: ISA 2006 SP1 and Exchange 2007 SP1
http://www.ISAserver.org
-------------------------------------------------------
Suppose it depends on what type of services your new firm provides!!
:-)
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Thomas W Shinder
Sent: Saturday, 31 January 2009 4:00 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: ISA 2006 SP1 and Exchange 2007 SP1
http://www.ISAserver.org
-------------------------------------------------------
We ran into the same BS with CheapSh*tDaddy.
Got it fixed though.
Promise to send some biz to my new firm and I'll let you know about the
fix ;) Took us a while to figure out the problem.
Tom
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Andy Haigh
Sent: Friday, January 30, 2009 10:51 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: ISA 2006 SP1 and Exchange 2007 SP1
http://www.ISAserver.org
-------------------------------------------------------
Sure these are all in the end GoDaddy sites. They claim it should work
with Windows Mobile devices. They claim this:
You should be able to use a Standard Multiple Domain (UCC) SSL
Certificate with mobile devices. Our root certificate - the Valicert
Class 2 Policy Validation Authority - is installed in the following
browser versions:
* Internet Explorer 5.01 and higher
* AOL 5 and higher
* Netscape 4.7 and higher
* Opera 7.5 and higher
* Safari on Mac OS X 10.3.4 and higher
* Mozilla (all versions)
* Firefox (all versions)
* Konqueror (all versions
* Palm OS 6.1 and higher (also Treo 650)
* BlackBerry OS 4.1 and higher
* Sony Playstation Portable 2.5 and higher
* Microsoft Windows Mobile 2005 AKU 2 and higher
* Sun Java Runtime (JRE) 1.4.2_07 and higher and 1.5.0_02 and
higher
* ACCESS NetFront 3.3 and higher
* Cingular WAP Gateways (any Cingular phone which uses WAP version
1.X for Web browsing)
* Many Nokia devices manufactured in 2007 and later
Though when I look in the Certificates on my Jasjam with WM6 Pro CE OS
5.2.1620 (Build 18125.0.4.2) that cert is not listed.
Has anyone got this working with this kind of certificate, just want to
ensure I don't waste a load of time to find there certs just don't work
with WM6 devices.
I suppose I will have to install it on my device. Suppose I now know why
theses certs are so cheap!!
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Thomas W Shinder
Sent: Saturday, 31 January 2009 2:11 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: ISA 2006 SP1 and Exchange 2007 SP1
http://www.ISAserver.org
-------------------------------------------------------
You thinking of GoDaddy here? :)
____________________________________________
TOM SHINDER | Sr. Consultant/Technical Writer
206.443.1117 | SHINDER@xxxxxxxxxxxxxxx
5701 Sixth Avenue South | Seattle, WA 98108
PROWESS | WWW.PROWESSCORP.COM
____________________________________________
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of
> Klosa, Bill
> Sent: Thursday, January 29, 2009 11:13 PM
> To: isalist@xxxxxxxxxxxxx
> Cc: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: ISA 2006 SP1 and Exchange 2007 SP1
>
> http://www.ISAserver.org
> -------------------------------------------------------
>
> We have seen similiar things with Windows Mobile device that required
> the manual addition of the intermediate certificate on the mobile
> device to validate without error.
>
> Bill
>
> Sent from my iPhone
>
> On Jan 29, 2009, at 10:05 PM, "Andy Haigh" <ahaigh@xxxxxxxxxxxxxxxx>
> wrote:
>
> > http://www.ISAserver.org
> > -------------------------------------------------------
> >
> > I went to a similar site as www.certificatesforexchange.com called
> > www.domainsforexchange.com but I think in my haste I have purchased
> > the
> > wrong one and therefore my windows 6 mobile devices won't work. The
> > iPhones are working as they don't seem to care to much about the
> > certificate.
> >
> > I have purchased the Standard SSL Multiple Domain (UCC) when I think
I
> > should have purchased either the Deluxe or Premium SSL variant.
Please
> > could someone advise if this is correct. When I browse owa from IE7
> > it
> > connects quite happily but from the mobile device it tells me that
> > "The
> > certificate was issued by a company you have chosen not to trust"
> > which
> > tells me that Windows Mobile 6 doesn't know about these
certificates.
> >
> > Thanks
> >
> > Andy
> >
> > -----Original Message-----
> > From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx
> > ]
> > On Behalf Of Han Valk
> > Sent: Thursday, 29 January 2009 11:56 PM
> > To: isalist@xxxxxxxxxxxxx
> > Subject: [isalist] Re: ISA 2006 SP1 and Exchange 2007 SP1
> >
> > http://www.ISAserver.org
> > -------------------------------------------------------
> >
> > Do you have a stand-alone CAS and HT, or are these roles combined?
> > For a stand-alone CAS and HT you need 2 different certs.
> > Will you use Autodiscover? If yes do you want SSL for this service?
> > What DNS suffixes do you use for email? I had a customer that uses
> > abc.local
> > for AD; def.tld for webmail and xyz.tld for SMTP and no split DNS.
> > All this influences the values for CN and SAN's in your cert.
> >
> > have a look here: https://www.digicert.com/easy-csr/exchange2007.htm
> > And here: http://www.certificatesforexchange.com
> >
> > Han.
> >
> >
> >> -----Original Message-----
> >> From: isalist-bounce@xxxxxxxxxxxxx
> > [mailto:isalist-bounce@xxxxxxxxxxxxx]
> >> On Behalf Of Andy Haigh
> >> Sent: Wednesday, 28 January, 2009 02:53
> >> To: isalist@xxxxxxxxxxxxx
> >> Subject: [isalist] Re: ISA 2006 SP1 and Exchange 2007 SP1
> >>
> >> Can you recommend an SSL vendor that provides SAN Certs that will
> > work.
> >>
> >>
> >>
> >> Some I have looked at say Single Server, would that cause a problem
> > with
> >> the cert needing to be on both the Exchange and ISA server?
> >>
> >>
> >>
> >> From: isalist-bounce@xxxxxxxxxxxxx
> > [mailto:isalist-bounce@xxxxxxxxxxxxx]
> >> On Behalf Of Steve Moffat
> >> Sent: Wednesday, 28 January 2009 11:38 AM
> >> To: ISA Mailing List
> >> Subject: [isalist] Re: ISA 2006 SP1 and Exchange 2007 SP1
> >>
> >>
> >>
> >> You need a SAN cert.
> >>
> >>
> >>
> >> From: isalist-bounce@xxxxxxxxxxxxx
> > [mailto:isalist-bounce@xxxxxxxxxxxxx]
> >> On Behalf Of Andy Haigh
> >> Sent: Tuesday, January 27, 2009 8:28 PM
> >> To: ISA Mailing List
> >> Subject: [isalist] Re: ISA 2006 SP1 and Exchange 2007 SP1
> >>
> >>
> >>
> >> OK, after reading the documents I have a question regarding using a
> >> commercial SSL certificate.
> >>
> >>
> >>
> >> With the command (using Tom's example) used to request the
> > certificate:
> >>
> >> New-ExchangeCertificate -GenerateRequest -SubjectName
> >> "DC=msfirewall.org, DC=com, O=msfirewall, CN=owa.msfirewall.org" -
> >> DomainName owa.msfirewall.org, smtp.msfirewall.org,
> >> autodiscover.msfirewall.org, msfirewall.org,
> > exch2007mb.msfirewall.org,
> >> exch2007mb -FriendlyName "Microsoft Exchange 2007" -Path
> > c:\mailcert.req
> >>
> >> I assume I will be required to purchase a wildcard certificate for
> > this
> >> to work or can I just purchase a single certificate such as
> >> owa.domain.com?
> >>
> >>
> >>
> >> If they bought a single cert would this still allow them to use
owa,
> > RPC
> >> over HTTPS and activesync? Would it break things like internal
> >> autodiscover in Outlook 2007?
> >>
> >>
> >>
> >> Thanks
> >>
> >>
> >>
> >> Andy
> >>
> >>
> >>
> >> From: isalist-bounce@xxxxxxxxxxxxx
> > [mailto:isalist-bounce@xxxxxxxxxxxxx]
> >> On Behalf Of Jim Harrison
> >> Sent: Tuesday, 27 January 2009 4:56 PM
> >> To: isalist@xxxxxxxxxxxxx
> >> Subject: [isalist] Re: ISA 2006 SP1 and Exchange 2007 SP1
> >>
> >>
> >>
> >> There are no process changes to ISA that are specific to Exchange
SP1
> >> publishing.
> >>
> >> .
> >>
> >>
> >>
> >>
> >>
> >>
> >>
> >>
> >>
> >>
> >>
> >> From: isalist-bounce@xxxxxxxxxxxxx
> > [mailto:isalist-bounce@xxxxxxxxxxxxx]
> >> On Behalf Of Andy Haigh
> >> Sent: Monday, January 26, 2009 4:46 PM
> >> To: isalist@xxxxxxxxxxxxx
> >> Subject: [isalist] ISA 2006 SP1 and Exchange 2007 SP1
> >>
> >>
> >>
> >> Hi,
> >>
> >> I am just researching configuring publishing Exchange 2007 SP1
> > services
> >> via ISA2006 SP1 and have started reading Tom's articles which I
> > believe
> >> are based on the pre SP1 versions of both Exchange and ISA Server.
> >> Are
> >> there any differences to the way you would proceed with the setup
> > using
> >> SP1 versions and if so are there any updated documents covering a
SP1
> >> product install.
> >>
> >>
> >>
> >> Thanks
> >>
> >>
> >>
> >> Andy
> >
> > ------------------------------------------------------
> > List Archives: //www.freelists.org/archives/isalist/
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server Articles and Tutorials:
> > http://www.isaserver.org/articles_tutorials/
> > ISA Server Blogs: http://blogs.isaserver.org/
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > Report abuse to listadmin@xxxxxxxxxxxxx
> >
> > ------------------------------------------------------
> > List Archives: //www.freelists.org/archives/isalist/
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
> > ISA Server Blogs: http://blogs.isaserver.org/
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > Report abuse to listadmin@xxxxxxxxxxxxx
> >
> >
>
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
>
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
