|
|
|
date: Fri, 16 May 2008 15:35:41 -0700,
group: microsoft.public.exchange.setup
back
RE: What type of Certificate is needed for CAS 2007 server
Hello Steven,
Thank you for your post. My name is Robbin Meng, and it is my pleasure to
work with you on this issue!
Please allow me to confirm that my understandings are correct. As I
understand it, the issue is:
You would like to add a new Exchange server 2007 as the CAS server role to
replace the previous Exchange 2003 server which ever handles Outlook Mobile
Access, Outlook Web Access, and RPC/HTTPS redirects for clients.
If I have misunderstood your concerns please feel free to let me know.
What do mean by "UC certificate is required"? As far as I know, there isn't
any special certificate needed for you.
Actually, if you would like to use Autodiscovery, you may transfer Exchange
Server 2003 Certificate to Exchange Server 2007 Autodiscover Server
In this scenario you have a certificate you are already using on an
Exchange Server 2003 server and want to implement it on your new Client
Access Server. This scenario would only be applicable in an environment
where your presence on the Internet might be a single namespace such as
domain.com and the certificate you have is issued to domain.com. This would
require https://domain.com/Autodiscover/Autodiscover.xml to be accessible
from the Internet.
1. On the server where Microsoft Exchange Server 2003 is installed use
Certificate Manager to export the certificate as a .pfx file from the
server.
2. Copy the .pfx file to the new Microsoft Exchange Server 2007 Client
Access Server.
3. Import the pfx certificate file using the Import-ExchangeCertificate
cmdlet as in previous scenario examples.
4. To enable the certificate for use on the server use the
Enable-ExchangeCertificate cmdlet as in previous scenario examples.
Hope this helps. Also, if you have any questions or concerns, please do not
hesitate to let me know.
Thank you for your time and cooperation!
Best regards,
Robbin Meng(MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
date: Mon, 19 May 2008 11:33:40 GMT
author: (Robbin Meng [MSFT])
Re: What type of Certificate is needed for CAS 2007 server
On Mon, 19 May 2008 11:33:40 GMT, v-robmen@online.microsoft.com
("Robbin Meng [MSFT]") wrote:
>Hello Steven,
>
>Thank you for your post. My name is Robbin Meng, and it is my pleasure to
>work with you on this issue!
>
>Please allow me to confirm that my understandings are correct. As I
>understand it, the issue is:
>
>You would like to add a new Exchange server 2007 as the CAS server role to
>replace the previous Exchange 2003 server which ever handles Outlook Mobile
>Access, Outlook Web Access, and RPC/HTTPS redirects for clients.
>
>If I have misunderstood your concerns please feel free to let me know.
>
>What do mean by "UC certificate is required"? As far as I know, there isn't
>any special certificate needed for you.
He means a UCC certificate. One that uses a Subject Alternative Name.
>
>Actually, if you would like to use Autodiscovery, you may transfer Exchange
>Server 2003 Certificate to Exchange Server 2007 Autodiscover Server
>
>In this scenario you have a certificate you are already using on an
>Exchange Server 2003 server and want to implement it on your new Client
>Access Server. This scenario would only be applicable in an environment
>where your presence on the Internet might be a single namespace such as
>domain.com and the certificate you have is issued to domain.com. This would
>require https://domain.com/Autodiscover/Autodiscover.xml to be accessible
>from the Internet.
>
>1. On the server where Microsoft Exchange Server 2003 is installed use
>Certificate Manager to export the certificate as a .pfx file from the
>server.
>2. Copy the .pfx file to the new Microsoft Exchange Server 2007 Client
>Access Server.
>3. Import the pfx certificate file using the Import-ExchangeCertificate
>cmdlet as in previous scenario examples.
>4. To enable the certificate for use on the server use the
>Enable-ExchangeCertificate cmdlet as in previous scenario examples.
>
>Hope this helps. Also, if you have any questions or concerns, please do not
>hesitate to let me know.
>
>Thank you for your time and cooperation!
>
>
>Best regards,
>
>Robbin Meng(MSFT)
>
>Microsoft CSS Online Newsgroup Support
>
>Get Secure! - www.microsoft.com/security
>
>=====================================================
>This newsgroup only focuses on SBS technical issues. If you have issues
>regarding other Microsoft products, you'd better post in the corresponding
>newsgroups so that they can be resolved in an efficient and timely manner.
>You can locate the newsgroup here:
>http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
>
>When opening a new thread via the web interface, we recommend you check the
>"Notify me of replies" box to receive e-mail notifications when there are
>any updates in your thread. When responding to posts via your newsreader,
>please "Reply to Group" so that others may learn and benefit from your
>issue.
>
>Microsoft engineers can only focus on one issue per thread. Although we
>provide other information for your reference, we recommend you post
>different incidents in different threads to keep the thread clean. In doing
>so, it will ensure your issues are resolved in a timely manner.
>
>For urgent issues, you may want to contact Microsoft CSS directly. Please
>check http://support.microsoft.com for regional support phone numbers.
>
>Any input or comments in this thread are highly appreciated.
>=====================================================
>
>This posting is provided "AS IS" with no warranties, and confers no rights.
date: Mon, 19 May 2008 07:51:49 -0400
author: Andy David {MVP}
|
|
