SSL for OWA and Smart Phones

[robspwing]

Hi All,

Thanks in advance. I am running Windows Server 2003 with Exchange 2007. I am considering either buying an SSL cert or creating one (

http://www.msexchange.org/tutorials/SSL_Enabling_OWA_2003.html#

)

This would allow some of my remote users to connect to the Exchange server via their phone (EAS).

Any ideas if the link posted above is a good way to do the SSL cert or am I better off buying one?

Thanks

Rob

Doc, we better back up. We don't have enough road to get up to 88.

 

[58sniper]

In 2007, you're best using a commercial cert. Using a Subject Alternative Name (SAN) certificate is recommended, as you can include your autodiscover name, OWA name, etc.

Pat Richard MVP
Plan for performance, and capacity takes care of itself. Plan for capacity, and suffer poor performance.

http://www.ucblogs.net/blogs/exchange/

 

[strongm]

As a matter of interest, it is possible to issue your own SAN certificate.

 

[Zelandakh]

Some phones accept self certs but not all.

 

[strongm]

Nick, I don't think that either the OP nor myself are advocating self-certs ...

 

[robspwing]

thanks

Rob

Doc, we better back up. We don't have enough road to get up to 88.

 

[pogi05]

Just to add,

The self-cert may not work with Outlook Anywhere (at least it didn't for me with Exchange 2003); so I also advocate purchasing one.

Chris

 

[strongm]

And I'll just repeat that neither the original post nor my comment about issuing your own SAN (also known as UCC)certificate are talking about self-signed certificates.

In both cases we are talking about using Microsoft's CA (comes with their Server products, but generally installed by default) to issue and sign the certificate.