I want to install SSL Certificates so that my users can use Outlook on the
Internet without VPN's



I have 2 Exchange 2K3 Servers in 2 different AD sites connected via a VPN.



When I go to install the certificate service, do I install an Enterprise
Certificate so that both servers can use them and should I install it on a
DC.



No Internet commerce involved.



I have only found a TechNet article about installing, but not about type of
CAs.



Thanks,

Tom...

Re: Certificate of Authority by Bill

Bill
Thu Nov 02 09:58:11 CST 2006

Tom, I think you want to do RPC over HTTP. It's not too difficult to
configure, Technet has a lot of good info. Here's one article from the set:
http://www.microsoft.com/technet/prodtechnol/exchange/guides/E2k3RPCHTTPDep/13217cf9-b86e-42e2-ac22-462d96d597c4.mspx?mfr=true

This approach allows us to use our SSL cert on the front end OWA server,
keeping all traffic secure and encrypted (well as good as internet traffic
can be I guess :)) and still use our Outlook clients.
Bill

"Tom K" <tkarpowski@bennettcompany.com> wrote in message
news:%23yvIFTp$GHA.3560@TK2MSFTNGP03.phx.gbl...
>I want to install SSL Certificates so that my users can use Outlook on the
>Internet without VPN's
>
>
>
> I have 2 Exchange 2K3 Servers in 2 different AD sites connected via a VPN.
>
>
>
> When I go to install the certificate service, do I install an Enterprise
> Certificate so that both servers can use them and should I install it on a
> DC.
>
>
>
> No Internet commerce involved.
>
>
>
> I have only found a TechNet article about installing, but not about type
> of CAs.
>
>
>
> Thanks,
>
> Tom...
>
>



Re: Certificate of Authority by John

John
Thu Nov 02 13:02:20 CST 2006

This should help you,

http://www.msexchange.org/tutorials/Outlook_2003_Connect_Exchange_2003.html

--
John Oliver, Jr
MCSE, MCT, CCNA
Exchange MVP 2007
Microsoft Certified Partner

"Tom K" <tkarpowski@bennettcompany.com> wrote in message
news:%23yvIFTp$GHA.3560@TK2MSFTNGP03.phx.gbl...
>I want to install SSL Certificates so that my users can use Outlook on the
>Internet without VPN's
>
>
>
> I have 2 Exchange 2K3 Servers in 2 different AD sites connected via a VPN.
>
>
>
> When I go to install the certificate service, do I install an Enterprise
> Certificate so that both servers can use them and should I install it on a
> DC.
>
>
>
> No Internet commerce involved.
>
>
>
> I have only found a TechNet article about installing, but not about type
> of CAs.
>
>
>
> Thanks,
>
> Tom...
>
>



Re: Certificate of Authority by Tom

Tom
Thu Nov 02 13:24:19 CST 2006

I understand everything except for this statement, This procedure assumes
that you have obtained and published a certificate

This is driving me crazy and I don't know where to go...? I go to install
the certificate service to get started and I am prompted for the type of
certificate, machine, enterprise, etc...?

Please help...

Tom...

"Bill P" <bpierini@csuchico.edu> wrote in message
news:OLWU0ep$GHA.4592@TK2MSFTNGP03.phx.gbl...
> Tom, I think you want to do RPC over HTTP. It's not too difficult to
> configure, Technet has a lot of good info. Here's one article from the
> set:
> http://www.microsoft.com/technet/prodtechnol/exchange/guides/E2k3RPCHTTPDep/13217cf9-b86e-42e2-ac22-462d96d597c4.mspx?mfr=true
>
> This approach allows us to use our SSL cert on the front end OWA server,
> keeping all traffic secure and encrypted (well as good as internet traffic
> can be I guess :)) and still use our Outlook clients.
> Bill
>
> "Tom K" <tkarpowski@bennettcompany.com> wrote in message
> news:%23yvIFTp$GHA.3560@TK2MSFTNGP03.phx.gbl...
>>I want to install SSL Certificates so that my users can use Outlook on the
>>Internet without VPN's
>>
>>
>>
>> I have 2 Exchange 2K3 Servers in 2 different AD sites connected via a
>> VPN.
>>
>>
>>
>> When I go to install the certificate service, do I install an Enterprise
>> Certificate so that both servers can use them and should I install it on
>> a DC.
>>
>>
>>
>> No Internet commerce involved.
>>
>>
>>
>> I have only found a TechNet article about installing, but not about type
>> of CAs.
>>
>>
>>
>> Thanks,
>>
>> Tom...
>>
>>
>
>