Is the laptop a domain member? If so it implicitly trusts all certs issued by your domain ca. In that case, create a ucc cert with all your needed cn's and that's it.
Make the request from a ps console and fulfil it through which ever means you're comfortable with against your ca. Easiest imho. jlc From: [email protected] [mailto:[email protected]] On Behalf Of Gavin Wilby Sent: Wednesday, November 12, 2014 7:01 AM To: '[email protected]' Subject: RE: [Exchange] RE: Self sign certificate and Outlook Anywhere Hi, Thanks for the replies, this is all a bit new to me as in the past I have used SBS where all this is taken care of. The domain already has a CA, the Exchange already has its own self sign certs. Whats going to be the easiest way to achieve this? Can I not simply get outlook to ignore the certificate, or is this a massive no no? Gavin Wilby IT Support Engineer From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of ccollins9 Sent: 12 November 2014 13:25 To: exchange Subject: Re: [Exchange] RE: Self sign certificate and Outlook Anywhere Once you have it figured out where you will be getting the cert, be sure to issue a SAN cert with both the internal and external website names. SAN certs allow multiple DNS names on a single cert. The certificate request wizard in exchange will generate a cert request with multiple names by default. Also, if you are going to stand up your own CA, there is an additional step you must perform to allow it to issue SAN certs. http://exchangeserverpro.com/how-to-issue-a-san-certificate-to-exchange-server-2010-from-a-private-certificate-authority/ Setup your own CA for your domain, the clients will trust it, then use the same ca to issue a cert for the right cn that your exch server will use. Or use startcom to issue a free cert for the server. jlc From: [email protected]<mailto:[email protected]> [mailto:[email protected]<mailto:[email protected]>] On Behalf Of Gavin Wilby Sent: Wednesday, November 12, 2014 5:29 AM To: '[email protected]<mailto:[email protected]>' Subject: [Exchange] Self sign certificate and Outlook Anywhere Hi all, I have Exchange 2010 that is running with a valid self signed certificate. I need to set up a laptop with Outlook Anywhere, this seems to work fine right up until the point it tries to connect. It asks for credentials, and then immediately says: There is a problem with the proxy servers security certificate. The name does not match... This is because of course that out external name for the server, is not the same as the internal name. Is there any work around for this to allow the client to connect? Gavin Wilby IT Support Engineer SMP Partners Ltd Clinch's House, Lord Street, Douglas, Isle of Man IM99 1RZ Tel +44 1624 682214<tel:%2B44%201624%20682214> Mob +44 7624 480575<tel:%2B44%207624%20480575> [email protected]<mailto:[email protected]> www.smppartners.com<http://www.smppartners.com/> A member of the SMP Partners Group of Companies SMP Partners Limited, SMP Trustees Limited and SMP Fund Services Limited are licensed by the Isle of Man Financial Supervision Commission. SMP Accounting & Tax Limited is a member of the ICAEW Practice Assurance Scheme. SMP Partners Limited registered in the Isle of Man, Company Registration No: 000908V Directors: M.W. Denton, M.J. Derbyshire, P.N. Eckersley, S.E McGowan, O. Peck, J.J. Scott, S.J. Turner SMP Trustees Limited registered in the Isle of Man, Company Registration No: 068396C Directors: A.C. Baggesen, M.W. Denton, O. Peck, J.J. Scott, J. Watterson, J. Cubbon SMP Fund Services Limited registered in the Isle of Man, Company Registration No: 120288C Directors: V. Campbell, M.W. Denton, P.N. Eckersley, D.A. Manser, S.E McGowan, O. Peck, J.J. Scott, R.K. Corkill SMP Accounting & Tax Limited registered in the Isle of Man, Company Registration No: 001316V Directors: I.F. Begley, A.J. Dowling, P. Duchars, P.N. Eckersley, J.J. Scott, S.J. Turner SMP Capital Markets Limited registered in the Isle of Man, Company Registration No: 002438V Directors: M.W. Denton, M.J. Derbyshire, D.F Hudson, S.E McGowan, O. Peck, J.J. Scott. SMP Partners Limited, SMP Trustees Limited, SMP Fund Services Limited, SMP Accounting & Tax Limited and SMP Capital Markets Limited are members of the SMP Partners Group of Companies. This email is confidential and is subject to disclaimers. Details can be found at: http://www.smppartners.com/disclaimer.html ______________________________________________________________________ This email has been scanned by the Symantec Email Security.cloud service. For more information please visit http://www.symanteccloud.com ______________________________________________________________________ ______________________________________________________________________ This email has been scanned by the Symantec Email Security.cloud service. For more information please visit http://www.symanteccloud.com ______________________________________________________________________
