Background: I have an exchange 2007 server that is setup and working correctly, however I am looking at options for a SSL certificate to help ease connectivity issues. The biggest problem is the former IT guy has given their internal domain name an external domain name that they do not own. (someone else has it and will not sell). They do own an external domain name but it is not referenced to the internal network. I have tried using a GoDaddy UCC certificate but was never able to get it to install properly because the private key was not included on the returned certificate. I even got with Microsoft to verify I was sending the private key out. I am grateful that GoDaddy did refund the money. Question: What is the best possible solution to getting the signed SSL certificate working in this environment? I would also like to get the autodiscover working for both internal and external computers. Anyone have any suggestions?
>>I have tried using a GoDaddy UCC certificate but was never able to get it >>to >>install properly because the private key was not included on the returned >>certificate. - The server's private key is never included in certificates. It is generated on your server during the certificate request and stays there. The Public Key is what is sent to the CA and included in the certificate issued by it. - Not relevant to your situation, but the only time you need a cert with a private key is when you're moving the certificate to another computer (or backing up, rebuilding the server, etc... ). This is an option when you export the certificate from your computer. -- Bharat Suneja MVP - Exchange www.zenprise.com NEW blog location: exchangepedia.com/blog ---------------------------- "Craig_96" wrote in message news:EC7AE614-396C-415D-AE2A-EC410AC27E0A@microsoft.com... > Background: > I have an exchange 2007 server that is setup and working correctly, > however > I am looking at options for a SSL certificate to help ease connectivity > issues. The biggest problem is the former IT guy has given their internal > domain name an external domain name that they do not own. (someone else > has > it and will not sell). They do own an external domain name but it is not > referenced to the internal network. > > I have tried using a GoDaddy UCC certificate but was never able to get it > to > install properly because the private key was not included on the returned > certificate. I even got with Microsoft to verify I was sending the > private > key out. I am grateful that GoDaddy did refund the money. > > Question: > What is the best possible solution to getting the signed SSL certificate > working in this environment? > > I would also like to get the autodiscover working for both internal and > external computers. > > Anyone have any suggestions? > >