Problem with autodiscovery SSL cert

[0876663276]

Hi All, having problem with autodiscovery service on my exchange 2007. Person who was looking after exchange is gone from company and I have to sorted problem with autodiscovery and OOO. I know I need get new cert because when outlook is conecting inside domain returns cert error. Problem is my domain is diffrent than external url.
so my for example my domain is san.com and my exchange server is mail.san.com, but my external url is mail.server.com. I got cert pointing to mail.server.com but my DNS autodiscovery record is pointing to mail.san.com IP. I guess I need all of them on one cert to resolve it. Just wana check if get it right, before I request new cert, do I need all this adresses on my cert
mail.san.com
mail
autodiscovery.mail.server.com
mail.server.com

if Im wrong please correct me.

do I have to set up DNS a record for autodiscovery.mail.server.com to external IP of that website or to internal exchange ip adress
?


thanks Saimon

 

[58sniper]

I know I need get new cert because when outlook is conecting inside domain returns cert error.

That doesn't mean you need a new cert.

Problem is my domain is diffrent than external url.

That really means nothing.

Do you have split brain DNS (an internal DNS zone for your external DNS namespace)? If so, then the only thing needed in your cert is

mail.domain.com (whatever your OWA address is)
autodiscover.domain.com

If your MX record points to a name other than mail.domain.com, you can include that name as well.

I'm not a fan of putting internal names on externally facing certificates.

Pat Richard MVP
Plan for performance, and capacity takes care of itself. Plan for capacity, and suffer poor performance.

http://www.exchangeblogs.com/