We are setting up TLS encryption on our exchange server to encrypt emails between our organization and a client. Currently we have a certificate issued on the exchange 2000 server for use w/ OWA. The certificate has been exported to our ISA server for secure access to OWA. For setting up the TLS encryption, will we need a new certificate or can we just use the existing one? This is somewhat new to me, please help.
Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
Encrypting Email Help. 1
- Thread starter rwieting
- Start date
-
1
- #2
You should be able to use the existing cert. From my experience with TLS, you will have to setup a new SMTP to be used for sending to the client. If you need help with that just let me know.
---------------------------------------
---------------------------------------
- Thread starter
- #3
I've never setup a 2nd SMTP virtual Server. It looks to be pretty easy. However, my question is what IP address do I use. From what I've been reading, the default virtual server listens on all IP addresses and not to use the same one it has. We have 1 IP address for our email server. I'm not sure it this will matter, but our mail server is "mail.mydomain.com" the name for our certificate is "webssl.mydomain.com" (for OWA)w/ an A record pointing to the public IP for our mail server.
Thanks again.
Thanks again.
You can change the smtp to listen to the main IP address that the server has. Then create a new IP address to be used for the TLS SMTP, to add a new IP address, just open up the Connection Properties, then double click TCP/IP config or protocol, then click Advanced, and the first box you can click Add and add a new internal IP address for the smtp to listen to. With that you can have your router point all the incoming smtp or mail connections from the client to that IP address and it will go through the TLS SMTP.
---------------------------------------
---------------------------------------
- Thread starter
- #5
For the TLS SMTP connection, would I just be able to use our clients IP from their email server as the IP of the virtual server? I saw this listed in this article
Ive never tried that, the way i have it setup here is I have a TLS SMTP that is setup to route all incoming and outgoing mail for the client based on the domain name. Our firewall has a rule setup for all mail coming in from their IP address to route to the special TLS smtp. Thats how i did it, that doesnt mean the other way wont work.
---------------------------------------
---------------------------------------
- Thread starter
- #7
- Status
Similar threads
- Locked
- Question
- Locked
- Question
- Locked
- Question