[isalist] Re: ISA 2006 SP1 and Exchange 2007 SP1
- From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
- To: <isalist@xxxxxxxxxxxxx>
- Date: Tue, 27 Jan 2009 18:46:26 -0600
Andy,
Read the Exchange Help file information about the names that need to be
included. Also, in the article I forgot to include the command to mark
the private key as exportable, which lead to no end of frustration on my
part :)
Where you need a SAN cert or not seems to depend on what functionality
you want to enable. I'm no expert in Exchange 2007 certificate
requirements. However, you might want to check Jason Jone's blog about
his trials and tribulations on making as many of the features work and
his use of certificate naming conventions.
____________________________________________
TOM SHINDER | Sr. Consultant/Technical Writer
206.443.1117 | SHINDER@xxxxxxxxxxxxxxx
5701 Sixth Avenue South | Seattle, WA 98108
PROWESS | WWW.PROWESSCORP.COM <http://www.prowesscorp.com/>
____________________________________________
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Andy Haigh
Sent: Tuesday, January 27, 2009 6:28 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: ISA 2006 SP1 and Exchange 2007 SP1
OK, after reading the documents I have a question regarding using a
commercial SSL certificate.
With the command (using Tom's example) used to request the certificate:
New-ExchangeCertificate -GenerateRequest -SubjectName
"DC=msfirewall.org, DC=com, O=msfirewall, CN=owa.msfirewall.org"
-DomainName owa.msfirewall.org, smtp.msfirewall.org,
autodiscover.msfirewall.org, msfirewall.org, exch2007mb.msfirewall.org,
exch2007mb -FriendlyName "Microsoft Exchange 2007" -Path c:\mailcert.req
I assume I will be required to purchase a wildcard certificate for this
to work or can I just purchase a single certificate such as
owa.domain.com?
If they bought a single cert would this still allow them to use owa, RPC
over HTTPS and activesync? Would it break things like internal
autodiscover in Outlook 2007?
Thanks
Andy
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Jim Harrison
Sent: Tuesday, 27 January 2009 4:56 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: ISA 2006 SP1 and Exchange 2007 SP1
There are no process changes to ISA that are specific to Exchange SP1
publishing.
.
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Andy Haigh
Sent: Monday, January 26, 2009 4:46 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] ISA 2006 SP1 and Exchange 2007 SP1
Hi,
I am just researching configuring publishing Exchange 2007 SP1 services
via ISA2006 SP1 and have started reading Tom's articles which I believe
are based on the pre SP1 versions of both Exchange and ISA Server. Are
there any differences to the way you would proceed with the setup using
SP1 versions and if so are there any updated documents covering a SP1
product install.
Thanks
Andy
Other related posts:
