Hi,

I just purchased a SAN certificate from GoDaddy. I am having a hard time
finding out what url's I should be adding.

Oh, I purchased this for Exchange 2007 SP1 std. Single Domain.

My full domain name is, mydomain.domain.com I didn't make it and am not
sure why it was done like that.
My exchange server name is, namex64.
The address people will use to get to owa from the outside is,
mail.domain.com

In the certificate I think I need these,

Common Name = mail.domain.com
SAN names
1. mydomain.domain.com
2. namex64.mydomain.domain.com
3. autodiscover.mydomain.domain.com

Then I'm not sure what else I need. We do not sync with phones. We do not
use Outlook Anywhere either.

So what other "names" do I need in the SAN?

Thank you.

Re: Cert by Jamestechman

Jamestechman
Fri Mar 14 09:18:57 CDT 2008

Depends on what services you're using such as autodiscover (which you
can get by without a separate using DNS srv record) but typically

1. hostname: nameex64.mydomain.domain.com
2. Webmail: webmail.mydomain.domain.com (your public DNS name that
your users access webmail externally)
3. Autodiscover: autodiscover.mydomain.domain.com


Securing an Exchange 2007 Client Access Server using a 3rd party SAN
Certificate
http://www.msexchange.org/articles_tutorials/exchange-server-2007/mobility-c=
lient-access/securing-exchange-2007-client-access-server-3rd-party-san-certi=
ficate.html


A new feature is available that enables Outlook 2007 to use DNS
Service Location (SRV) records to locate the Exchange Autodiscover
service
http://support.microsoft.com/kb/940881



James Chong (MVP)
MCITP | EMA; MCSE | M+, S+,
Security+, Project+, ITIL
msexchangetips.blogspot.com



On Mar 14, 9:26=A0am, "ryne" <cubbies1...@hotmail.com> wrote:
> Hi,
>
> I just purchased a SAN certificate from GoDaddy. =A0I am having a hard tim=
e
> finding out what url's I should be adding.
>
> Oh, I purchased this for Exchange 2007 SP1 std. =A0Single Domain.
>
> My full domain name is, mydomain.domain.com =A0 I didn't make it and am no=
t
> sure why it was done like that.
> My exchange server name is, namex64.
> The address people will use to get to owa from the outside is,
> mail.domain.com
>
> In the certificate I think I need these,
>
> Common Name =3D mail.domain.com
> SAN names
> 1. mydomain.domain.com
> 2. namex64.mydomain.domain.com
> 3. autodiscover.mydomain.domain.com
>
> Then I'm not sure what else I need. =A0We do not sync with phones. =A0We d=
o not
> use Outlook Anywhere either.
>
> So what other "names" do I need in the SAN?
>
> Thank you.


Re: Cert by ryne

ryne
Fri Mar 14 17:40:44 CDT 2008

Thanks James

"Jamestechman" <jamestechman@gmail.com> wrote in message
news:e6fe60b9-b11a-4312-8d74-8c2aa2b7c337@u69g2000hse.googlegroups.com...
Depends on what services you're using such as autodiscover (which you
can get by without a separate using DNS srv record) but typically

1. hostname: nameex64.mydomain.domain.com
2. Webmail: webmail.mydomain.domain.com (your public DNS name that
your users access webmail externally)
3. Autodiscover: autodiscover.mydomain.domain.com


Securing an Exchange 2007 Client Access Server using a 3rd party SAN
Certificate
http://www.msexchange.org/articles_tutorials/exchange-server-2007/mobility-client-access/securing-exchange-2007-client-access-server-3rd-party-san-certificate.html


A new feature is available that enables Outlook 2007 to use DNS
Service Location (SRV) records to locate the Exchange Autodiscover
service
http://support.microsoft.com/kb/940881



James Chong (MVP)
MCITP | EMA; MCSE | M+, S+,
Security+, Project+, ITIL
msexchangetips.blogspot.com



On Mar 14, 9:26 am, "ryne" <cubbies1...@hotmail.com> wrote:
> Hi,
>
> I just purchased a SAN certificate from GoDaddy. I am having a hard time
> finding out what url's I should be adding.
>
> Oh, I purchased this for Exchange 2007 SP1 std. Single Domain.
>
> My full domain name is, mydomain.domain.com I didn't make it and am not
> sure why it was done like that.
> My exchange server name is, namex64.
> The address people will use to get to owa from the outside is,
> mail.domain.com
>
> In the certificate I think I need these,
>
> Common Name = mail.domain.com
> SAN names
> 1. mydomain.domain.com
> 2. namex64.mydomain.domain.com
> 3. autodiscover.mydomain.domain.com
>
> Then I'm not sure what else I need. We do not sync with phones. We do not
> use Outlook Anywhere either.
>
> So what other "names" do I need in the SAN?
>
> Thank you.