Hi All:
I'm needing to create a self signed certificate for OWA 2007. I'm
wanting to use my own certificate authority which is Microsoft
Certificate Services.
The common name (CN) for my certificate will the the URL that most
external users will access OWA 2007 with (webmail.companyname.com)
The internal computer name of the Exchange server (which also runs
webmail) is not webmail but is something else.
Unfortunately, when the certificate with the common name of
webmail.companyname.com is placed on the Exchange server, all my
Outlook 2007 internal clients start giving a certificate error.
I'm assuming this is because Outlook 2007 clients notice that the
Exchange server's certificate has the CN of webmail.companyname.com
which doesn't match the server's internal name on the network. This
internal name is the name that Outlook 2007 Autodiscover picks up on
to connect to the server with. So, since that internal name isn't
webmail, the Outlook clients start complaining but external users who
access OWA are fine because the names match.
So, I need a certificate with some subject alternate names (SAN).
However, I do not see a place in the Microsoft Certificate Services to
do this.
The closest thing looks like the Additional Attributes box that is
under Advanced Certificate Request/Submit a cert request by using base
64 encoded CMC, etc when accessing the URL http://servername/certsrv
where servername is my internal Microsoft CA.
Can I use the Additional Attributes to do SANs? Or can the Microsoft
Certificate Services not do this at all? Am I forced to go to a 3rd
party CA?
Thanks!
Drew