| Author |
Message |
Mango
Guest
|
 Posted:
Tue Jan 25, 2005 8:10 am Post subject:
OWA (2003), ISA (2004) and SSL certificate from Verisign??? |
|
|
Setup:
2 Exchange 2003 Servers (Win 2003)
1 OWA Server (Win 2003)
All 3 of the above are on the internal network behind the firewall
1 ISA 2004 Server (Win 2003) in the DMZ
This is my first time setting up OWA. It is also my first time setting up
ISA. So my (probably stupid) question is: when I purchase an SSL Certificate
from Verisign, do I purchase it for the ISA server or the OWA server?
Thanks
|
|
| Back to top |
|
 |
Mark Arnold [MVP]
Guest
|
| Posted:
Tue Jan 25, 2005 2:10 pm Post subject:
Re: OWA (2003), ISA (2004) and SSL certificate from Verisign |
|
|
On Mon, 24 Jan 2005 21:16:24 -0800, "Mango" <mango.man@verizon.net>
wrote:
| Quote: | Setup:
2 Exchange 2003 Servers (Win 2003)
1 OWA Server (Win 2003)
All 3 of the above are on the internal network behind the firewall
1 ISA 2004 Server (Win 2003) in the DMZ
This is my first time setting up OWA. It is also my first time setting up
ISA. So my (probably stupid) question is: when I purchase an SSL Certificate
from Verisign, do I purchase it for the ISA server or the OWA server?
Thanks
You purchase it for the OWA but you need to do steps to get it onto |
the ISA as well. see www.isaserver.org for a couple of articles that
give you the step by step instructions. |
|
| Back to top |
|
|
Vince
Guest
|
| Posted:
Tue Jan 25, 2005 3:59 pm Post subject:
Re: OWA (2003), ISA (2004) and SSL certificate from Verisign |
|
|
Mango wrote:
| Quote: | Setup:
2 Exchange 2003 Servers (Win 2003)
1 OWA Server (Win 2003)
All 3 of the above are on the internal network behind the firewall
1 ISA 2004 Server (Win 2003) in the DMZ
This is my first time setting up OWA. It is also my first time setting up
ISA. So my (probably stupid) question is: when I purchase an SSL Certificate
from Verisign, do I purchase it for the ISA server or the OWA server?
|
Hi Mango,
I recently deployed OWA doing exactly what you're talking about, and the
MS Guide was extremely helpful and described all the variations in
scenario and gave how-to information as well:
http://www.microsoft.com/technet/prodtechnol/isa/2004/plan/digitalcertificates.mspx
With the above guide, I was up and running in minutes.
Regards
Vince
|
|
| Back to top |
|
|
Guest
|
| Posted:
Tue Jan 25, 2005 11:09 pm Post subject:
Re: OWA (2003), ISA (2004) and SSL certificate from Verisign |
|
|
Vince wrote:
| Quote: | Mango wrote:
Setup:
2 Exchange 2003 Servers (Win 2003)
1 OWA Server (Win 2003)
All 3 of the above are on the internal network behind the firewall
1 ISA 2004 Server (Win 2003) in the DMZ
This is my first time setting up OWA. It is also my first time
setting up
ISA. So my (probably stupid) question is: when I purchase an SSL
Certificate
from Verisign, do I purchase it for the ISA server or the OWA
server?
Hi Mango,
I recently deployed OWA doing exactly what you're talking about, and
the
MS Guide was extremely helpful and described all the variations in
scenario and gave how-to information as well:
http://www.microsoft.com/technet/prodtechnol/isa/2004/plan/digitalcertificates.mspx
With the above guide, I was up and running in minutes.
Regards
Vince
|
Vince & Mark,
Thank you for your assistance.
Vince, the document you linked to it just what I needed. If I
understand it correctly, I will purchase a Certificate from Verisign
for the OWA server and then export it to the ISA server. Then (Should I
see the need for added security) I will set up an internal certificate
for use between the OWA and ISA server for an HTTPS connection between
them.
Mark, I have spent a great deal of time reading isaserver.org and even
bought 2 or Tom Shinder's ISA books, and posted a question or two
regarding this on the message boards. The reply I got from Tom was
vague, but in the end it suggested I purchase the Cert specifically for
the ISA server requiring IIS be installed on it etc. Something about
that just did not sound right to me, which is why I turned to you kind
folks in the news group. The document that Vince linked to confirmed my
suspicion that installing IIS on the ISA server is not the recommended
way to go about it. Both isaserver.org and msexchange.org have been
useful to me, but in this case I was not able to find the answers I
needed there.
Again thanks to both of you though.
Charles (Mango) |
|
| Back to top |
|
|
Mark Arnold [MVP]
Guest
|
| Posted:
Tue Jan 25, 2005 11:48 pm Post subject:
Re: OWA (2003), ISA (2004) and SSL certificate from Verisign |
|
|
On 25 Jan 2005 09:09:18 -0800, cbraun@cityofpasadena.org wrote:
| Quote: |
Vince wrote:
Mango wrote:
Setup:
2 Exchange 2003 Servers (Win 2003)
1 OWA Server (Win 2003)
All 3 of the above are on the internal network behind the firewall
1 ISA 2004 Server (Win 2003) in the DMZ
This is my first time setting up OWA. It is also my first time
setting up
ISA. So my (probably stupid) question is: when I purchase an SSL
Certificate
from Verisign, do I purchase it for the ISA server or the OWA
server?
Hi Mango,
I recently deployed OWA doing exactly what you're talking about, and
the
MS Guide was extremely helpful and described all the variations in
scenario and gave how-to information as well:
http://www.microsoft.com/technet/prodtechnol/isa/2004/plan/digitalcertificates.mspx
With the above guide, I was up and running in minutes.
Regards
Vince
Vince & Mark,
Thank you for your assistance.
Vince, the document you linked to it just what I needed. If I
understand it correctly, I will purchase a Certificate from Verisign
for the OWA server and then export it to the ISA server. Then (Should I
see the need for added security) I will set up an internal certificate
for use between the OWA and ISA server for an HTTPS connection between
them.
Mark, I have spent a great deal of time reading isaserver.org and even
bought 2 or Tom Shinder's ISA books, and posted a question or two
regarding this on the message boards. The reply I got from Tom was
vague, but in the end it suggested I purchase the Cert specifically for
the ISA server requiring IIS be installed on it etc. Something about
that just did not sound right to me, which is why I turned to you kind
folks in the news group. The document that Vince linked to confirmed my
suspicion that installing IIS on the ISA server is not the recommended
way to go about it. Both isaserver.org and msexchange.org have been
useful to me, but in this case I was not able to find the answers I
needed there.
Again thanks to both of you though.
Charles (Mango)
|
Interesting to hear what they said in the ISA forums.
http://www.isaserver.org/articles/2004owapub.html is the one I was
refering to and I need to check it to make sure it still says what it
used to. |
|
| Back to top |
|
|
|
|
|
|
FAQ
Memberlist
Register
Profile
Log in to check your private messages
Log in