Hi Spence, There is a difference....when I connect to your site and you present a cert for me to use to create an SSL tunnel, I look at one of the attributes of it to determine who issued it. For me to trust your cert, I have to trust the cert of the CA that issued yours thus the CA cert (root cert) must also be installed on ISA to present to the people connecting to your site. TD Ted Doholis SaltSpring Software Inc. -----Original Message----- From: Spencer Read (Nemesis) [mailto:ser@xxxxxxxxxxxxx] Sent: Tuesday, March 01, 2005 7:58 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: OWA Publishing http://www.ISAserver.org Ted, Is there a difference between the single cert I created and the entire chain. Unfortunately, I have not done anything to do with certs before so I'm learning fast. ...Spence -----Original Message----- From: Ted Doholis [mailto:tdoholis@xxxxxxxxxxxxx] Sent: 01 March 2005 12:47 To: [ISAserver.org Discussion List] Subject: [isalist] RE: OWA Publishing http://www.ISAserver.org Sounds like you don't have access to the cert chain while your vpn is disconnected. Make sure your isa server has the entire chain installed not just the one cert. Ted Doholis SaltSpring Software Inc. ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tdoholis@xxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx