TOM, I have created the certificate and install it at the exchange server per your instruction. It works in the INTRANET. Now how do I install the certificate on the ISA server? Do you have the step by step guidelines how to do this in the ISA? Thanks again -----Original Message----- From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx] Sent: Saturday, January 11, 2003 3:07 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Implementing SSL? http://www.ISAserver.org Hi Jay, You need to assign a certificate to the Web site, then export the certificate and install it into the machine certificate store on the ISA Server. Then bind the certificate to the Incoming Web Requests listener. You should also configure the Web Publishing Rule for SSL to SSL bridging so that the entire communication is secure. Note that you DO NOT need to configure the Web Publishing rule to use client certificate authentication to make this work. HTH, Tom www.isaserver.org/shinder -----Original Message----- From: Jay Apolinario [mailto:japolinario@xxxxxxxxxxx] Sent: Saturday, January 11, 2003 12:12 PM To: [ISAserver.org Discussion List] Subject: [isalist] Implementing SSL? http://www.ISAserver.org To: Everybody who can't sleep. I have two servers namely E2K for exchange 2k running enterprise Exchange and ISA running ISAServer with the following notes: * OWA runs in E2K and ISA is for firewall * External users are accessing e-mail using HTTP through the firewall I am now in the planning stage of putting in SSL to secure my web servers. I am looking at getting a CSR from VERISIGN Questions are: Do I need two certificates to register E2K and ISA? I am trying to secure E2K using SSL, however this server is not connected directly to the INTERNET. All external users are getting through the ISA box. Thanks in advance. ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: japolinario@xxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')