I found that the free edition does not support SAN and so, you might need another cert. for autodiscover.your_domain but… not a big deal. Class 2 and above will do it and can’t beat their prices… I will seriously reconsider changing over when our production cert. expires.
Here are the steps to provision your Exchange Server with startcom.org SSL certificate.
***Windows Explorer 7 will NOT work. Save yourself time and frustration, get Firefox to complete this task…
Go to this link: https://www.startssl.com/?app=12
Click on Sign-Up button
Fill in the form…
…and click Continue. An email with validation code will be sent to the email address you’ve used on the form. Enter it and continue. You will be taken to your toolbox.
First thing to do here is to verify your domain – click Check DNS of Domain link. Enter your domain name and TLD, and click Check. Another validation email will follow – you know the drill. Once your domain is verified, it will appear here:
Now it is time to create your Exchange 2010 CSR (Certificate Signing Request). Go to your Exchange server, start EMC and go to Server Configuration. Click New Exchange Certificate on right pane. Give it a name first:
Do not enable Wild Card – we cannot issue it any way.
Because we want (and can only) test some basic functionality, not all options will be used here:
On the next screen you will see some SAN’s but… StartSSL free edition will disregard it any way…
On the next screen you need to enter some info (again – it will be disregarded) and also a location – where the CSR will be saved. In this case – c:\NewReq.req
Click “Next” on the last screen and the request will be processed.
Locate .req file, open it with text editor and copy the text.
Click Continue.
***Make sure you click “Skip” button (since we generated the key on our exchange server).
On the next screen paste the text we copied from the .req file.
…and click Continue. Once the certificate is signed, you will receive an email with instructions now to retrieve it.
Go to the Toolbox, Click “Retrieve Certificate” link, select your certificate from the drop down menu and click Continue.
Copy the text in the box – this is your certificate.
Go to your Exchange server, create new text file name it MyCert or so, paste the text and save it. ***NOTE. Change the file extension to .cer to avoid confusion later.
Before we proceed with the Certificate import, there is one more step – we must import the StartSSL Root CA to our Exchange server. Go to your StarCom’s Toolbox and click StartCom CA Certificates link. You will be presented with this screen:
You need to save “Server Certificate Bundle with CRLs (PEM encoded)” to a location accessible from your exchange server. Go back to your exchange server, locate the file “ca-bundle.cer” if you used the default name, right click over it and select Install Certificate. Accept the default settings.
Once the Root CA is installed, we can now complete the Certificate Request. On EMC, highlight the Request you created earlier (this where the Friendly name comes handy), and click Complete Pending Request on the right pane.
Complete the steps in the wizard (you will have to select the .cer file you created earlier), assign the services associated with this certificate and… I restarted the server just in case…
It worked:
84 comments:
I just got off the phone with their tech support.
They said the free certificate does NOT work with Exchange 2010...
Works fine for me :) Thanks for the guide!
Any idea on how to get this to work with dynamic DNS?
What about SAN ? or one domain_name iin cert is correct for Exchange 2010?
Hi thank you for the howto... works perfectly with rpc/http but i have certificatz error on local outlook. It saus that the name of the certificate doesnt match with my local server name...
Tangui, you can create a new forward lookup zone on your internal dns that matches your domain's external name. Create than a A record with the internal ip of your server, something like "exchange.domain.com". Configure outlook to point to this address instead of you currently have.
Regards,
Miguel
You mention that I can add a second certificate for autodiscover.domain.com. Can you explain how this is done?
Jonathan,
You have two options:
1. Sign up for Class 2 certificate service. It is very cheap, it is for two years, and comes with unlimited certificates, unlimited SAN, wildcard, you name it.
2. Use Reverse Proxy with multiple listeners, where single certificate is assigned to every listener.
Tried to use the Startcom SSL - but it did not work properly.
With their free SSL certificate you will receive nasty error messages (because you cannot add SAN to the free cert). Useless for my setup.
And for a class 2 cert (where you can add additional host names) they wanted a copy of my passport - NO, THANKS.
So I ended up buying a domain validated Comodo UCC - got a good price, it was issued in less than 10 minutes and it definitely works with Exchange 2013 :-)
Comodo SSL (UCC) for Exchange Server
It should also be outpointed that the free class 1 certificate from StartCom MUST NOT be used for any commercial purpose...
@Lars:
Thanks for the referral - bought a PositiveSSL Multi-Domain Certificate from SSLPOINT - hassle free order process, excellent support. Highly recommendable !
Good article, thanks for sharing the great stuff about microsoft.
hi no work more you can make a new post ?
gracias
Thanks for sharing this with so much of detailed information, its much more to learn from your article. Keep sharing such good stuff.
Mobile Repairing Institute in Delhi
Mobile Repairing Course in Delhi
Laptop Repairing Course in Delhi
Mobile Repairing Course in Laxmi Nagar
Mobile Repairing Institute in Laxmi Nagar
LED LCD Repairing Course in Delhi
Much obliged to you again for all the information you distribute,Good post. I was extremely keen on the article, it's entirely motivating I ought to concede. I like going to you site since I generally go over fascinating articles like this one.
Digital Marketing Institute in Delhi
Digital Marketing Course in Delhi
Digital Marketing Course in Laxmi Nagar
Digital Marketing Institute in Laxmi Nagar
Great and unique post. Thanks for sharing.
Server for rent at low price
Excellent post. Thanks for sharing.
2D/3D CAD System Requirements
I appreciate this i have got lots of knowledge from this blog thank you keep it up.
mobile repairing course
mobile repairing course in delhi
Thank you so much for the post. Keep posting such blogs. Thanks a lot.
LED LCD TV Repairing Course in Delhi
LED LCD Smart TV Repairing Course in Delhi
LED Smart TV Repairing Course in Delhi
LED LCD TV Repair Training
LED LCD TV Repair Training in Delhi
LED LCD TV Repairing Course
LED LCD TV Repair Course
LED LCD TV Repair Institute in Delhi
LCD TV Repair Training Institute in Delhi
Mobile Repairing Course in Delhi
Mobile Repairing Institute in Delhi
Mobile Repairing Course in India
Mobile Repairing Course in Laxmi Nagar
Mobile Repairing Institute in Laxmi Nagar
Mobile Repairing Institute in India
LED LCD TV Repairing Course in Laxmi Nagar
Best CBSE school in Lucknow
Excellent post. Thank you so much.
Led Lcd Tv Repairing Institute in Delhi
Led Lcd Tv Repairing Course in Delhi
Led Lcd Smart Tv Repairing Course in Delhi
Led Lcd Smart Tv Repairing Institute in Delhi
Led Lcd Tv Repairing Course in Laxmi Nagar
Led Lcd Tv Repairing Institute in Laxmi Nagar
Led Lcd Tv Repairing Institute in India
Led Lcd Tv Repairing Course in India
Mobile Repairing Institute in Delhi
Mobile Repairing course in Delhi
Thanks for share with us.
Led Lcd Smart Tv Repairing Course In Delhi
Led Lcd Smart Tv Repairing Institute In Delhi
Led Lcd Tv Repairing Course In Delhi
Led Lcd Tv Repairing Institute In Delhi
Led Lcd Tv Repairing Course In India
Mobile Repairing Course In Delhi
Mobile Repairing Institute In Delhi
Mobile Repairing Course In Laxmi nagar
Mobile Repairing Institute In Laxmi Nagar
Mobile Repairing Course In India
Nice Article Very Helpful ! Thanks for sharing ! Also check
Tutuapp APK
Very Interesting and wonderful information keep sharing this post kindly check
Animeapp For Android
I am reading a blog on this website for the first time and I would like to tell you that the quality of the article is up to the mark it is very well written.
Digital Marketing Company
Digital marketing course in Delhi
great post. Thanks for sharing this information.Tutuapp APK
121,544 entertainers are the individuals from Screen Actors Guild send their votes to respect their individual associates at the most esteemed Hollywood occasion. "On-screen characters"
Sag Awards 2019 Live Stream
Great blog thanks for sharing with me. If you have faced any issue then click on customer service . They are best. They have experts who are highly qualified and well trained in their field. They observe your problem and give the best solution read more... Quickbooks Helpdesk Number
I like the helpful info you provide in your Blog really explains everything in detail the Blog is very interesting and effective
Digital Marketing Ideas
Learn about Digital Marketing
tubemate for windows
good post thanks for sharing
Best Digital Marketing Institute in Delhi
Great piece of information!
Thanks for sharin!
Beti Bachao Beti Padhao
I Like Your Post Thanks For Share!
TutuApp APK
Thanks for sharing this with us
Wah kya likha hai
PKMKB
Thanks for sharing with us
PKMKB
A really good post man, very thankful and hopeful that you will write many more posts like this one.
lifestyle matters
lifestyle matters
Latest Version For Free Numerous individuals need to watch recordings
like films, shows, serials, live stations and substantially more.
Tubemate YouTube Downloader for iPhone
Awesome Blog And Information Thanks For Sharing
Download WhatsApp Plus Apk For iOS And Android
this blog is very helpful for me , i got genuine results from this blog.
Thanks a lot for this amazing content ...you're Awesome.
digital marketing institute
digital marketing training institute in delhi
SEO training center
java training institute
java coaching center
android training center
android training institute
android institute
top android training center
website designing institute
website designing training institute
best website designing training institute
python training center
python training institute
best python institute
Apzel Infotech
Apzelinfotech.com
Apzel
the tutu helper is the one of the best
ios,android App tutuapp download apk store to
get the tons of free app and game. Here the latest version of TutuApp of free.
the WhatsApp Plus APK is one of the best mod app for official WhatsApp Plus Download for free, get unlimited features of whatsapp plus for free. Here Click to download the latest version whatsapp plus apk.
The Tutu App download is the best app to download latest
app and Apk for free so use now to TutuApp ios
free App.
the panda helper apk is the best app to download latest app for free so download now panda app to unlock a many feature now download now.
Vidmate app download
ufone internet packages
roblox promo codes
This is a really instructive post, you're an incredibly skilled blogger. I've joined your blog searching for a more noteworthy measure of your brilliant post. Moreover, I have shared your site on my informal communities
regards
iso certification in saudi arabia | iso 9001 certification in saudi arabia
Interesting post , I am going to spend more time learning about this subject webflow designers
I am glad to be one of the visitants on this outstanding internet site (:, regards for posting . webflow designer
Nice article. That’s exactly what I was searching for. Thanks for the info. Also you can check out FM Whatsapp details to get a better version of whatsapp.
best site for Satta king result, leak number & all game record charts. We provide 100% fix number direct from Satta king gali company which includes all famous games like Satta king Desawar, Gali Satta, Ghaziabad, Faridabad, Shri Ganesh Satta, Taj Satta King, charminar and other games of Satta Market Matka is also a simple game and essentially is a form of old lottery games. Ratan Khatri was the founder of this game in the 70 century and was become popular up until the 90 century. The game is not played that much anymore mostly in the regions of North India and Pakistan. Instead, many enjoy the lottery games more so these days.
Here is an example card. satta-king.online is the no1 satta king site where you can get the fastest Satta result, Satta king leak number (confirm jodi), Old Satta King ghaziabad, Daily leak Jodi, Desawar Jodi, Satta king faridabad, Satta record chart, Satta king taj, Gali Satta result, Ghaziabad Satta Result, Satta Bazar result and 100% passing fix Jodi today.
Free GBmods official Whatsapp Plus Download here
best whatsapp alternatve GB Whatsapp 2020 Download free here
I am really enjoying reading your well written articles. It looks like you spend a lot of effort and time on your blog. I have bookmarked it and I am looking forward to reading new articles. Keep up the good work.gb whatsapp new version
Bollyshare.com 2020 is a pirated website to make films publicly available to all people.
Songspk ||
HDmoviePlus ||
Ocean Of Movies ||
SSC Exam Result is a trending now in Bangladesh. SSC Examination was completed. All students are waiting to get their SSC Exam Result 2020. This year SSC Result 2020 will publish on 1st week in May. On the result day, after 12PM all students will get their SSC Exam Result 2020 from Bangladesh Education Board official website. Also Dakhil Result 2020 and SSC Vocational Result 2020 will publish on 6 May 2020
SSC Exam Result is a trending now in Bangladesh. SSC Examination was completed. All students are waiting to get their SSC Exam Result 2020. This year SSC Result 2020 will publish on 1st week in May. On the result day, after 12PM all students will get their SSC Exam Result 2020 from Bangladesh Education Board official website. Also Dakhil Result 2020 and SSC Vocational Result 2020 will publish on 6 May 2020
SSC Exam Result 2020 in Bangladesh. SSC Result coming soon. All students are waiting to get their SSC Result 2020. This year SSC Result 2020 will publish on 06 May 2020. Students can collect their SSC Result 2020 from Bangladesh Education Board official website.
HSC Examination was completed few days ago. Now HSC Result 2020 is the trending topic in Bangladesh. All HSC Examinee waiting to get their HSC Result. All candidates will check their HSC Result 2020 from Bangladesh Educational official website at educationboardresults.gov.bd.
If your looking for Online Illinois license plate sticker renewals then you have need to come to the right place.We offer the fastest Illinois license plate sticker renewals in the state.
notepad download
Showbox apk download for android
Showbox Windows 10 Download
Showbox Android Official Download
Showbox apk download for PC
Share it download for android
Share it for windows 10
Downlaod Windows Version of Share it APK
Download Share it for PC
Share it download for ios
Download acmarket APK
acmarket PC Downlaod
Download Vivavideo APK
Vivavideo PC Downlaod
GBWhatsapp APK Downlaod
GBWhatsapp Pro Download
New Whatsapp Plus Download
Download Latest GBwhatsapp APK
New Whatsapp Plus Download
Latest GBInstagram APK Download
Showbox apk official download
Showbox Windows 10 Download
Showbox Android Official Download
Showbox Running APK Download
Showbox apk official for PC
Check Out How To Be More Productive and How To Become More Productive. Thanks!
Thanks for this post, I am a big fan of this web site would like to proceed updated. ui/ux design agency
Nice Article thanks for Sharing...
Anonytun Pro Mod Apk
Cute Cut Pro App
ES file Explorer Apk download
whatsapp groups
After looking into a number of the blog articles on your web site, I honestly like your technique of blogging. I saved it to my bookmark site list and will be checking back soon. Please visit my web site as well and let me know how you feel.
GBWhatsApp Latest Version
Thanks for sharing such a great blog Keep posting.
b2b data
sales automation tools
cleaning supplies should have earth friendly organic ingredients so that they do not harm the environment** front end developer
I would like to thank you for the efforts you have made in writing this article. I am hoping the same best work from you in the future as well. In fact your creative writing abilities has inspired me to start my own Blog Engine blog now. Really the blogging is spreading its wings rapidly. Your write up is a fine example of it.
gbwhatsappfree.com
WhatsApp Plus
Hey, I really like this blog and it was very helpful for me to thank you so much. Also, check out our blog.
Bee Factory Mod APK
دانلود آهنگ قدیمی
After looking into a number of the blog articles on your web site, I honestly like your technique of blogging. I saved it to my bookmark site list and will be checking back soon. Please visit my web site as well and let me know how you feel.
دانلود آهنگ غمگین
رضا بهرام
download the GB whatsapp in your android phone And IPHONE from the link provided
If your looking for Online Illinois license plate sticker renewals then you have need to come to the right place.We offer the fastest Illinois license plate sticker renewals in the state.
Nino Nurmadi, S.Kom
Nino Nurmadi, S.Kom
Nino Nurmadi, S.Kom
Nino Nurmadi, S.Kom
Nino Nurmadi, S.Kom
Nino Nurmadi, S.Kom
Nino Nurmadi, S.Kom
Nino Nurmadi, S.Kom
Nino Nurmadi, S.Kom
Post a Comment