Web Server Certificate 1

[Declaro]

Hello All,

I have been reading this forum for a while now and have found it to be a mine of useful information, now I find myself about to setup my first live SBS Server after running a test box for a while and I am a little unsure as to the setting for Web Server Certificate when initially setting up SBS…I have read lwcomputing’s tips and I am still unsure. Do I use my web domain name E.G.

http://www.webdomain.com

or if not what format should it be in?

Thanks for taking the time to read this and any help for a relatively inexperienced user when it comes to servers, will be appreciated, but hey, everyone starts somewhere

Dave

 

[nsanto17]

The cert should have the same name as the FQDN of the server.

for example

http://mainoffice.domain.com

 

[Declaro]

Thanks for the quick reply

So…let me get this right…if…

Server name = server
Local domain = localdomain.local
Web domain = webdomain.com

My FDQN would be…

http://server.localdomain.com

Sorry to be persistent, but I just want to get this right.

Many Thanks
Dave

 

[nsanto17]

where does your

http://www.domain.com

point to??? does it point to the public address of your SBS?

 

[Declaro]

Sorry, I don’t follow

Our website and email domain are - vicious-media.com
Our SBS domain is - vicious-media.local
And if I’m right the FQDN for the server is - serverpdc.vicious-media.local

With the above example what would the web cert be…I know this is like pulling teeth with me and I appreciate the help

Thanks
Dave

 

[nsanto17]

No problem...

Your FQDN would be serverpdc.vicious-media.com (not .local)

You will need to contact the company who is hosting your DNS and make sure that they create an enter to point serverpdc.vicious-media.com to your Public IP.

That way when your remote users type

http://serverpdc.vicious-media.com

it will be pointed to your SBS Box.

Does this make sense to you?

 

[Declaro]

Yes thank you

I know this is off topic but we use SMTP mail as the MX records for our domain name point to our public IP address (not sure I explained that correctly but we don’t use POP mail)

Would I need to do as you say for OWA because that is the only feature we would really need when working remotely or are there other benefits to doing as you say? Any info would be appreciated

Thank you for taking the time to help me with this
Dave

 

[nsanto17]

If you have maail.vicious-media.com already pointing to your public ip then you can use mail.vicious-media.com for your cert.

Once you have it setup correctly you can have your users access their pcs remotley using Remote Web Workplace (RWW).

Using RWW they can access the following:
OWA
Remote Desktop
Sharepoint

Great tool that comes with SBS2003. As far as i am concerned its prob the best feature that comes with SBS.

you can access RWW by typing /remote to the end of your domain that points to your public IP.

 

[Declaro]

nsanto17 your a star

Thank you for your time today it is greatly appreciated. I will do some research on RWW and look forward to seeing what it can do for us.

All the best
Dave

 

[PAC101]

????????

"create an enter to point serverpdc.vicious-media.com to your Public IP."

Does that mean they are to redirect from there DNS server to your public IP so you become the DNS server and have to set up your server to be a name server? or is it an "A" record, "CNAMES" record or "MX" record that they need to create?

 

[ShackDaddy]

He was talking about an A-record.

He was not talking about configuring his server to host DNS.

ShackDaddy
Shackelford Consulting

 

[PAC101]

Thanks ShackDaddy,

I can now access "remote web workplace" to my server
using myservername.mydomain.com/remote
I thought I was suppose to connect using
"mail.mydomain.com/remote"

my next step is to set up exchange to get my email from my email server.
After I do that will I be able to connect to "mail.mydomain.com"?
if so, did I need to make an A record to direct to my server?
Am I on the right track?

 

[ShackDaddy]

When you run the Internet and Mail setup wizard in the SBS tasks list, you are setting up both your mail and your OWA and RWW. You choose a name to have for a certificate at that point too, and typically you choose something that you have an A-record for, and that A-record points to your public IP. You can have more than one A-record pointing to your single public IP.

It doesn't matter if you have Exchange mail set up yet, you still can RWW if you've run the wizard and set things up. What name you use to connect to RWW totally depends on what you want to use. If you want 'wingnut.yourdomain.com', just create a 'wingnut' A-record that points at your public IP, and then run the wizard and tell it that the certificate should be created for 'wingnut.yourdomain.com'. Then you can point people to 'wingnut.yourdomain.com/remote' if you like. It's fine to have people pointing to 'mail.yourdomain.com/remote' too. There's nothing special about the name 'wingnut' or 'mail' or '

http://www'.

Just don't use 'doestoevski' since there are so many alternate spellings.

ShackDaddy
Shackelford Consulting