We just deployed Exchange 2007. Every thing is right except for OWA. When some one uses OWA to access his mailbox from INTERNET, it's OK. When some one uses OWA to access his mailbox from INTRANET an error about certificate appears. From INTERNET or INTRANET the name the OWA Server is not the same. In the certificate the name refer to the public name of that OWA Server. I don't know how to change IIS (v6) parameters to use 2 certificates: the first for INTERNET and the second for INTRANET Regards Franck V.
On Thu, 11 Oct 2007 10:32:36 +0200, "Franck V" wrote: >We just deployed Exchange 2007. Every thing is right except for OWA. > >When some one uses OWA to access his mailbox from INTERNET, it's OK. > >When some one uses OWA to access his mailbox from INTRANET an error about >certificate appears. > >From INTERNET or INTRANET the name the OWA Server is not the same. In the >certificate the name refer to the public name of that OWA Server. > >I don't know how to change IIS (v6) parameters to use 2 certificates: the >first for INTERNET and the second for INTRANET > > > >Regards > >Franck V. > You can't change IIS to use two certificates. You either create another OWA for internal or you unify the names that they address. http://www.sembee.co.uk/archive/2007/01/21/34.aspx will tell you the steps you need to do.
You may just use a certificate containing multiple names... Search for "Subject Alternative Name Certificates" Cheers, TOM "Mark Arnold [MVP]" wrote in message news:m82sg3l0ope3jfh26ec4rgni371oi5iqf7@4ax.com... > On Thu, 11 Oct 2007 10:32:36 +0200, "Franck V" > wrote: > >>We just deployed Exchange 2007. Every thing is right except for OWA. >> >>When some one uses OWA to access his mailbox from INTERNET, it's OK. >> >>When some one uses OWA to access his mailbox from INTRANET an error about >>certificate appears. >> >>From INTERNET or INTRANET the name the OWA Server is not the same. In the >>certificate the name refer to the public name of that OWA Server. >> >>I don't know how to change IIS (v6) parameters to use 2 certificates: the >>first for INTERNET and the second for INTRANET >> >> >> >>Regards >> >>Franck V. >> > You can't change IIS to use two certificates. > You either create another OWA for internal or you unify the names that > they address. > http://www.sembee.co.uk/archive/2007/01/21/34.aspx will tell you the > steps you need to do.
If you host your public DNS Zone internally on your DNS server then you could also just add the hosts public DNS name with it's internal IP. So if it's webmail.acme.com with 195.244.X.X publicly, in your DNS server under the acme.com Zone add it with 192.168.X.X (or whatever private you use) "Thomas Dehn" wrote in message news:%23q8lfZ%23DIHA.3980@TK2MSFTNGP03.phx.gbl... > You may just use a certificate containing multiple names... > > Search for "Subject Alternative Name Certificates" > > Cheers, TOM > > > "Mark Arnold [MVP]" wrote in message > news:m82sg3l0ope3jfh26ec4rgni371oi5iqf7@4ax.com... >> On Thu, 11 Oct 2007 10:32:36 +0200, "Franck V" >> wrote: >> >>>We just deployed Exchange 2007. Every thing is right except for OWA. >>> >>>When some one uses OWA to access his mailbox from INTERNET, it's OK. >>> >>>When some one uses OWA to access his mailbox from INTRANET an error about >>>certificate appears. >>> >>>From INTERNET or INTRANET the name the OWA Server is not the same. In the >>>certificate the name refer to the public name of that OWA Server. >>> >>>I don't know how to change IIS (v6) parameters to use 2 certificates: the >>>first for INTERNET and the second for INTRANET >>> >>> >>> >>>Regards >>> >>>Franck V. >>> >> You can't change IIS to use two certificates. >> You either create another OWA for internal or you unify the names that >> they address. >> http://www.sembee.co.uk/archive/2007/01/21/34.aspx will tell you the >> steps you need to do. > >