Welcome to ISAserver.org

Computer certificate for OWA?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> Web Publishing >> Computer certificate for OWA?

Page: [1]

Message

<< Older Topic Newer Topic >>

Computer certificate for OWA? - 23.Aug.2006 3:32:08 PM

Xuser

Posts: 205
Joined: 29.Jan.2002
From: Canada
Status: offline

Hi, I read Tom's article on publishing ISA Server 2004 OWA and it seems quite easy to implement. However, I do not understand what he meant by digital certificates.
To publish OWA, I know I need to issue "digital certificate" to both ISA Server 2004 and our Exch2000 server. We do have a CA running on one of our Win2003 Server. Do I issue a computer certificate to both of these servers or ??. I had problems issuing certificates using the web enrollment, therefore, I will be using the Certificate MMC console. Pls advise someone? TIA.

Post #: 1

Featured Links*

RE: Computer certificate for OWA? - 4.Sep.2006 4:11:26 PM

robcmk

Posts: 33
Joined: 21.Apr.2006
Status: offline

Hi,

If you are not able to use the web enrollment method to retrieve certificates then you will need to request a computer certificate from within the MMC snapin. When creating the request (if I recall correctly) the friendly name needs to match the name of the website.... eg if your owa site is owa.domain.com the friendly name must be the same.

Once this is installed on the local owa server, configure your split dns and test...make sure that the SSL works without errors referencing the name.

Now you can export the same cert from the mmc to the certificate store on the ISA server and then configure the listener appropriately. Remember that if requesting the certificate directly from the ISA box that you will need to change the system policy setting in Active Directory to do with restrictive DCOM.

Hope that helps, if you want more details just shout.

Rob.

(in reply to Xuser)