Help

My server (dc) named server.domain.local with a registered dns of
webmail.domain.com needs to have ssl on owa. I do not have a "public"
certificate.

If I install certificate services as a stand alone what do I need to do so
that remote users can contact the certificate at webmail.domain.com and end
my IE7 OWA certificate error.

Thank you

Re: Certificate Services on a .local server by David

David
Sun May 11 00:49:56 CDT 2008

On May 10, 11:46=A0am, Help me <Hel...@discussions.microsoft.com> wrote:
> Help
>
> My server (dc) =A0named =A0server.domain.local with a registered dns of
> webmail.domain.com needs to have ssl on owa. =A0I do not have a "public"
> certificate.
>
> If I install certificate services as a stand alone what do I need to do so=

> that remote users can contact the certificate at webmail.domain.com and en=
d
> my IE7 OWA certificate error.
>
> Thank you


Certificate Services are not necessary.

All you need is to control the remote users and have them install the
certificate used to sign the certificate installed on the IIS Server
serving up OWA.

If you cannot control remote users to install that certificate used by
your OWA server, then you MUST use a publicly purchased certificate.

http://blogs.msdn.com/david.wang/archive/2005/08/02/Free-SSL-on-IIS.aspx


//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang
//

Re: Certificate Services on a .local server by Helpme

Helpme
Sun May 11 07:07:00 CDT 2008

Well I have CA running and I installed the certificate by clicking on the red
error box on the address bar. When I return to the website I get the
following error

The security certificate presented by this website was not issued by a
trusted certificate authority.

the certificate is issued by webmail.x.com issued to webmail.x.com

I am on vista and ie7 so I installed the certificate to the trusted
certificate root auth as I read is needed for vista...



"David Wang" wrote:

> On May 10, 11:46 am, Help me <Hel...@discussions.microsoft.com> wrote:
> > Help
> >
> > My server (dc) named server.domain.local with a registered dns of
> > webmail.domain.com needs to have ssl on owa. I do not have a "public"
> > certificate.
> >
> > If I install certificate services as a stand alone what do I need to do so
> > that remote users can contact the certificate at webmail.domain.com and end
> > my IE7 OWA certificate error.
> >
> > Thank you
>
>
> Certificate Services are not necessary.
>
> All you need is to control the remote users and have them install the
> certificate used to sign the certificate installed on the IIS Server
> serving up OWA.
>
> If you cannot control remote users to install that certificate used by
> your OWA server, then you MUST use a publicly purchased certificate.
>
> http://blogs.msdn.com/david.wang/archive/2005/08/02/Free-SSL-on-IIS.aspx
>
>
> //David
> http://w3-4u.blogspot.com
> http://blogs.msdn.com/David.Wang
> //
>

Re: Certificate Services on a .local server by David

David
Sun May 11 07:47:34 CDT 2008

Well, it works for me...

You put the certificate in the Trusted Root store as elevated
Administrator, it gets trusted by the system. Doesn't matter who
generated the certificate or how. This includes self signed
certificates.

For example, that's why SSL works without the warning on the OWA
server itself.


//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang
//



On May 11, 5:07=A0am, Help me <Hel...@discussions.microsoft.com> wrote:
> Well I have CA running and I installed the certificate by clicking on the =
red
> error box on the address bar. =A0When I return to the website I get the
> following error
>
> The security certificate presented by this website was not issued by a
> trusted certificate authority.
>
> the certificate is issued by webmail.x.com issued to webmail.x.com
>
> I am on vista and ie7 so I installed the certificate to the trusted
> certificate root auth as I read is needed for vista...
>
>
>
> "David Wang" wrote:
> > On May 10, 11:46 am, Help me <Hel...@discussions.microsoft.com> wrote:
> > > Help
>
> > > My server (dc) =A0named =A0server.domain.local with a registered dns o=
f
> > > webmail.domain.com needs to have ssl on owa. =A0I do not have a "publi=
c"
> > > certificate.
>
> > > If I install certificate services as a stand alone what do I need to d=
o so
> > > that remote users can contact the certificate at webmail.domain.com an=
d end
> > > my IE7 OWA certificate error.
>
> > > Thank you
>
> > Certificate Services are not necessary.
>
> > All you need is to control the remote users and have them install the
> > certificate used to sign the certificate installed on the IIS Server
> > serving up OWA.
>
> > If you cannot control remote users to install that certificate used by
> > your OWA server, then you MUST use a publicly purchased certificate.
>
> >http://blogs.msdn.com/david.wang/archive/2005/08/02/Free-SSL-on-IIS.aspx
>
> > //David
> >http://w3-4u.blogspot.com
> >http://blogs.msdn.com/David.Wang
> > //- Hide quoted text -
>
> - Show quoted text -


Re: Certificate Services on a .local server by Helpme

Helpme
Sun May 11 10:53:00 CDT 2008

I am login as a computer administrator ... how do I elevate to admin ?

"David Wang" wrote:

> Well, it works for me...
>
> You put the certificate in the Trusted Root store as elevated
> Administrator, it gets trusted by the system. Doesn't matter who
> generated the certificate or how. This includes self signed
> certificates.
>
> For example, that's why SSL works without the warning on the OWA
> server itself.
>
>
> //David
> http://w3-4u.blogspot.com
> http://blogs.msdn.com/David.Wang
> //
>
>
>
> On May 11, 5:07 am, Help me <Hel...@discussions.microsoft.com> wrote:
> > Well I have CA running and I installed the certificate by clicking on the red
> > error box on the address bar. When I return to the website I get the
> > following error
> >
> > The security certificate presented by this website was not issued by a
> > trusted certificate authority.
> >
> > the certificate is issued by webmail.x.com issued to webmail.x.com
> >
> > I am on vista and ie7 so I installed the certificate to the trusted
> > certificate root auth as I read is needed for vista...
> >
> >
> >
> > "David Wang" wrote:
> > > On May 10, 11:46 am, Help me <Hel...@discussions.microsoft.com> wrote:
> > > > Help
> >
> > > > My server (dc) named server.domain.local with a registered dns of
> > > > webmail.domain.com needs to have ssl on owa. I do not have a "public"
> > > > certificate.
> >
> > > > If I install certificate services as a stand alone what do I need to do so
> > > > that remote users can contact the certificate at webmail.domain.com and end
> > > > my IE7 OWA certificate error.
> >
> > > > Thank you
> >
> > > Certificate Services are not necessary.
> >
> > > All you need is to control the remote users and have them install the
> > > certificate used to sign the certificate installed on the IIS Server
> > > serving up OWA.
> >
> > > If you cannot control remote users to install that certificate used by
> > > your OWA server, then you MUST use a publicly purchased certificate.
> >
> > >http://blogs.msdn.com/david.wang/archive/2005/08/02/Free-SSL-on-IIS.aspx
> >
> > > //David
> > >http://w3-4u.blogspot.com
> > >http://blogs.msdn.com/David.Wang
> > > //- Hide quoted text -
> >
> > - Show quoted text -
>
>

Re: Certificate Services on a .local server by David

David
Sun May 11 17:43:53 CDT 2008

Please search for instructions on how to do that.

Vista has UAC (User Access Control) enabled by default. It means that
real administrator power requires the "consent" dialog -- even if you
are logged in as a member of the Administrators group. The only user
that does not get that dialog is the actual "Adminstrator" account
itself, but that account is disabled and the password unknown by
default.

The idea for UAC is that you should *never* run as the actual
Administrator -- you shuld run as unprivileged user all the time, and
only for the <1% time you need to perform an administrative task do
you temporarily "elevate" your own privileges to do so. Thus, when you
browse the web or read email the other >99% of the time, you will run
as unpriviledged user such that even IF you attacked by virus/trojan
and such malware, you have no privileges to harm anything.


//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang
//



On May 11, 8:53=A0am, Help me <Hel...@discussions.microsoft.com> wrote:
> I am login as a computer administrator ... how do I elevate to admin ?
>
>
>
> "David Wang" wrote:
> > Well, it works for me...
>
> > You put the certificate in the Trusted Root store as elevated
> > Administrator, it gets trusted by the system. Doesn't matter who
> > generated the certificate or how. This includes self signed
> > certificates.
>
> > For example, that's why SSL works without the warning on the OWA
> > server itself.
>
> > //David
> >http://w3-4u.blogspot.com
> >http://blogs.msdn.com/David.Wang
> > //
>
> > On May 11, 5:07 am, Help me <Hel...@discussions.microsoft.com> wrote:
> > > Well I have CA running and I installed the certificate by clicking on =
the red
> > > error box on the address bar. =A0When I return to the website I get th=
e
> > > following error
>
> > > The security certificate presented by this website was not issued by a=

> > > trusted certificate authority.
>
> > > the certificate is issued by webmail.x.com issued to webmail.x.com
>
> > > I am on vista and ie7 so I installed the certificate to the trusted
> > > certificate root auth as I read is needed for vista...
>
> > > "David Wang" wrote:
> > > > On May 10, 11:46 am, Help me <Hel...@discussions.microsoft.com> wrot=
e:
> > > > > Help
>
> > > > > My server (dc) =A0named =A0server.domain.local with a registered d=
ns of
> > > > > webmail.domain.com needs to have ssl on owa. =A0I do not have a "p=
ublic"
> > > > > certificate.
>
> > > > > If I install certificate services as a stand alone what do I need =
to do so
> > > > > that remote users can contact the certificate at webmail.domain.co=
m and end
> > > > > my IE7 OWA certificate error.
>
> > > > > Thank you
>
> > > > Certificate Services are not necessary.
>
> > > > All you need is to control the remote users and have them install th=
e
> > > > certificate used to sign the certificate installed on the IIS Server=

> > > > serving up OWA.
>
> > > > If you cannot control remote users to install that certificate used =
by
> > > > your OWA server, then you MUST use a publicly purchased certificate.=

>
> > > >http://blogs.msdn.com/david.wang/archive/2005/08/02/Free-SSL-on-IIS.a=
spx
>
> > > > //David
> > > >http://w3-4u.blogspot.com
> > > >http://blogs.msdn.com/David.Wang
> > > > //- Hide quoted text -
>
> > > - Show quoted text -- Hide quoted text -
>
> - Show quoted text -