Outlook2007 certificate problems. Different name on the server and certificate.

[Tor-Magne]

Hei

I have been using office2003 until now. I haved started to install
office2007.
When I starts Outlook2007 I get security warnings telling me the name from
the securitycertificate is not ok - yes/no to continue.
I have a security certificate from verisign - we are using owa both local
and from internet.
The name from the certificate and server is not the same.
We have exchange 2007.

Any ideas how to fix this?

Tor-Magne

 

[Roady [MVP]]

Obtain a SAN certificate which has all the names on it which you use to
access the server.
I'm not sure if VeriSign offers such certificates but I know DigiCert does
for sure.
Another option would be to use multiple single name certificates and
dedicated each to the way of accessing it.

 

[Tor-Magne]

Thank you.

Obtain a SAN certificate which has all the names on it which you use to
access the server.
I'm not sure if VeriSign offers such certificates but I know DigiCert does
for sure.
Another option would be to use multiple single name certificates and
dedicated each to the way of accessing it.

 

[Roady [MVP]]

You're welcome!



-----

Thank you.

 

[Roady [MVP]]

You're welcome!



-----

Thank you.

 

[Tor-Magne]

Hi
Another q:
Is it ok to turn off require for certifies (checkbox) in iis - any problems
for office/outlook you know?

Tor-Magne

 

[Roady [MVP]]

You mean client based certificates? That's set to ignore by default.

 

[Tor-Magne]

No, the Default Web Site/Require Secure Channel (SSL) or other like the
Autodiscovery.
I don't know if this is a good idea - we user https to access the owa. We
can use http and not tell any secrets in the mail (joke).

Tor-Magne

 

[Roady [MVP]]

No, AFAIK Exchange 2007 requires a certificate to operate correctly. This
can be a self-signed certificate, but then the clients must have the
certificate installed as well as trusted. When you obtain a certificate from
a trusted root certificate authority, then the clients will trust the
certificate as well without any interaction.