How do I create a CA so that I can set OWA or outlook over https?

[southbeach]

I need to allow field agents to access our exchange server via web using their browsers. I understand that outlook via RDC or via https is the way to go.

For this, I need to create and install CA - I already bought a certificate from godaddy.com but I have no idea what to do from here.

I have looked around but nothing I've found seems to be a straight shot - petri.com has some articles but they all appear to depend on something having been done and they fail to mention what (I figure this since I tried following their steps but options are not as described on the articles).

Could you please point me in a direction where I could find a clear step-by-step on how this is done?

Thank you all in advance for your assistance!

 

[Dublin73]

here's a few useful sites for you (for Exchange 2003)...

http://www.msexchange.org/tutorials/SSL_Enabling_OWA_2003.html

http://www.msexchange.org/tutorials/OWA_Exchange_Server_2003.html

there's hundreds of sites on this subject that can be found through google etc.

How are you going to get to your Exchange servers from the outside world? If you're field agents aren't using some sort of VPN client and you want them to access OWA through a browser from the internet, from anywhere, you need to to get your ISP to set up an "A" record for your OWA server.

This "A" record may look something like yourowaservername.yourdomainname.com (note* it would be bad security practice to actually use the name of your OWA server here ) and yourowaservername.yourdomainname.com will resolve to a public internet address. Something like.... 89.129.42.33.

If you don't already have a public domain for your company (this is the bit that would be at the end of your e-mail addresses) you will also need to get one of these through your ISP

From there... at your DMZ/firewall, you need to allow SSL/https access from the outside world to your OWA server.

there's more to it than just all of this, but that should give you an idea of what to expect. I don't know how many Exchange servers you have or what your firewall setup is etc. so I can't really give you any more info

 

[theravager]

The site

http://msexchange.org/

has tutorials for all the different scenarios you will most likely be dealing with.

 

[southbeach]

Thank you guys!

I will peruse through given links and hope to put this to rest.

 

[Roadki11]

If you purchased a cert you dont need a CA, a CA is if you want to issue your own certs. Simply install the cert on your IIS server OWA.



RoadKi11

"This apparent fear reaction is typical, rather than try to solve technical problems technically, policy solutions are often chosen." - Fred Cohen