Exchange 2003 Cluster and HTTPS OWA
Exchange Server Forum Index Exchange Server
Discussion forums for Microsoft Exchange Server users.
Microsoft Outlook
 
 FAQFAQ   MemberlistMemberlist     RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 
 
Google
 
Web ExchangeServerHelp.com
Exchange 2003 Cluster and HTTPS OWA

 
Post new topic   Reply to topic    Exchange Server Forum Index -> Administration
Author Message
Andy Goodwin
Guest
Posted: Thu Dec 29, 2005 5:58 pm    Post subject: Exchange 2003 Cluster and HTTPS OWA Reply with quote
Hi,

I am trying to setup a pair of servers in a active/passive cluster. I don't
currently have the option for a frontend server so the current live server
will be taking outlook 2003 clients plus I want to enable OWA. I am testing
this at the moment and have setup a CA to provide a cert for one server and
tested https access fine. Of course when I fail over the cert isn't
resident on the second server and https fails. I could create a new cert
for this second server im sure, however, I would imagine that I would only
purchase a single cert from verisign therefore my question is: Is it
possible to add the same cert onto both servers?

thanks
Andy

Back to top
GT
Guest
Posted: Thu Dec 29, 2005 5:58 pm    Post subject: Re: Exchange 2003 Cluster and HTTPS OWA Reply with quote
Yes. Generate the cert request on one server and then install it there.
Then export it and install it on the second server. Make sure the name on
your cert is the public name you will be using for OWA and not the name of
the cluster node.

-GT
"Andy Goodwin" <andyjg247@antispamhotmail.com> wrote in message
news:OPVH4SHDGHA.2300@TK2MSFTNGP15.phx.gbl...
Quote:
Hi,

I am trying to setup a pair of servers in a active/passive cluster. I
don't currently have the option for a frontend server so the current live
server will be taking outlook 2003 clients plus I want to enable OWA. I
am testing this at the moment and have setup a CA to provide a cert for
one server and tested https access fine. Of course when I fail over the
cert isn't resident on the second server and https fails. I could create
a new cert for this second server im sure, however, I would imagine that I
would only purchase a single cert from verisign therefore my question is:
Is it possible to add the same cert onto both servers?

thanks
Andy
Back to top
Ben Winzenz [Exchange MVP
Guest
Posted: Thu Dec 29, 2005 5:58 pm    Post subject: Re: Exchange 2003 Cluster and HTTPS OWA Reply with quote
You can't import a .cer format using IIS. If you "install" it, all you are
doing is adding it to IE's certificate store.

From your other IIS server, you need to export it to .pfx format (this
includes the private keys). Once you do that, you can import it on the new
server.

--
Ben Winzenz
Exchange MVP
MessageOne
Read my blog!
http://winzenz.blogspot.com
http://feeds.feedburner.com/winzenz (RSS Feed)


"Andy Goodwin" <andyjg247@antispamhotmail.com> wrote in message
news:upQ9BbJDGHA.2644@TK2MSFTNGP09.phx.gbl...
Quote:
Hi,

I have a copy of the cert. I can dbl click it an install but when I use
IIS I don't have any entries available for assign existing. The box is
empty. There are 2 import choices but they ask for .pfx or key manager
backup files not .cer files. The cert seems fine on the other member of
the cluster but of course this is the one that made the request.

thanks again for your time.

Andy

"Jason Meyer" <jason.meyer@nospam.isd623.org> wrote in message
news:%23p$ZqpIDGHA.3856@TK2MSFTNGP12.phx.gbl...
Andy Goodwin wrote:
Hi,

Thanks for the reply.
To install the first cert I used IIS to create a request then created it
on my CA. I could then finalise the request on the first server. How
would I "finalise" this request on the second server without creating a
new cert request?
Or is there a different method?

thanks


"GT" <DSS4u@+++nospam+++HOTMAIL.COM> wrote in message
news:YJRsf.5745$l87.536186@news20.bellglobal.com...

Yes. Generate the cert request on one server and then install it there.
Then export it and install it on the second server. Make sure the name
on your cert is the public name you will be using for OWA and not the
name of the cluster node.

-GT
"Andy Goodwin" <andyjg247@antispamhotmail.com> wrote in message
news:OPVH4SHDGHA.2300@TK2MSFTNGP15.phx.gbl...

Hi,

I am trying to setup a pair of servers in a active/passive cluster. I
don't currently have the option for a frontend server so the current
live server will be taking outlook 2003 clients plus I want to enable
OWA. I am testing this at the moment and have setup a CA to provide a
cert for one server and tested https access fine. Of course when I
fail over the cert isn't resident on the second server and https fails.
I could create a new cert for this second server im sure, however, I
would imagine that I would only purchase a single cert from verisign
therefore my question is: Is it possible to add the same cert onto both
servers?

thanks
Andy





Make a back up of the cert once its created on the first server, then
copy it to the second server and import there. I think thats the point
Andy was trying to make.



Back to top
Andy Goodwin
Guest
Posted: Thu Dec 29, 2005 5:58 pm    Post subject: Re: Exchange 2003 Cluster and HTTPS OWA Reply with quote
Hi,

Thanks for the reply.
To install the first cert I used IIS to create a request then created it on
my CA. I could then finalise the request on the first server. How would I
"finalise" this request on the second server without creating a new cert
request?
Or is there a different method?

thanks


"GT" <DSS4u@+++nospam+++HOTMAIL.COM> wrote in message
news:YJRsf.5745$l87.536186@news20.bellglobal.com...
Quote:
Yes. Generate the cert request on one server and then install it there.
Then export it and install it on the second server. Make sure the name on
your cert is the public name you will be using for OWA and not the name of
the cluster node.

-GT
"Andy Goodwin" <andyjg247@antispamhotmail.com> wrote in message
news:OPVH4SHDGHA.2300@TK2MSFTNGP15.phx.gbl...
Hi,

I am trying to setup a pair of servers in a active/passive cluster. I
don't currently have the option for a frontend server so the current live
server will be taking outlook 2003 clients plus I want to enable OWA. I
am testing this at the moment and have setup a CA to provide a cert for
one server and tested https access fine. Of course when I fail over the
cert isn't resident on the second server and https fails. I could create
a new cert for this second server im sure, however, I would imagine that
I would only purchase a single cert from verisign therefore my question
is: Is it possible to add the same cert onto both servers?

thanks
Andy


Back to top
Ben Winzenz [Exchange MVP
Guest
Posted: Thu Dec 29, 2005 5:58 pm    Post subject: Re: Exchange 2003 Cluster and HTTPS OWA Reply with quote
When you go through the cert request in IIS, one of the options should be to
import and existing cert...

--
Ben Winzenz
Exchange MVP
MessageOne
Read my blog!
http://winzenz.blogspot.com
http://feeds.feedburner.com/winzenz (RSS Feed)


"Andy Goodwin" <andyjg247@antispamhotmail.com> wrote in message
news:uGrzEaIDGHA.3820@TK2MSFTNGP12.phx.gbl...
Quote:
Hi,

Thanks for the reply.
To install the first cert I used IIS to create a request then created it
on my CA. I could then finalise the request on the first server. How
would I "finalise" this request on the second server without creating a
new cert request?
Or is there a different method?

thanks


"GT" <DSS4u@+++nospam+++HOTMAIL.COM> wrote in message
news:YJRsf.5745$l87.536186@news20.bellglobal.com...
Yes. Generate the cert request on one server and then install it there.
Then export it and install it on the second server. Make sure the name
on your cert is the public name you will be using for OWA and not the
name of the cluster node.

-GT
"Andy Goodwin" <andyjg247@antispamhotmail.com> wrote in message
news:OPVH4SHDGHA.2300@TK2MSFTNGP15.phx.gbl...
Hi,

I am trying to setup a pair of servers in a active/passive cluster. I
don't currently have the option for a frontend server so the current
live server will be taking outlook 2003 clients plus I want to enable
OWA. I am testing this at the moment and have setup a CA to provide a
cert for one server and tested https access fine. Of course when I fail
over the cert isn't resident on the second server and https fails. I
could create a new cert for this second server im sure, however, I would
imagine that I would only purchase a single cert from verisign therefore
my question is: Is it possible to add the same cert onto both servers?

thanks
Andy




Back to top
Jason Meyer
Guest
Posted: Thu Dec 29, 2005 5:58 pm    Post subject: Re: Exchange 2003 Cluster and HTTPS OWA Reply with quote
Andy Goodwin wrote:
Quote:
Hi,

Thanks for the reply.
To install the first cert I used IIS to create a request then created it on
my CA. I could then finalise the request on the first server. How would I
"finalise" this request on the second server without creating a new cert
request?
Or is there a different method?

thanks


"GT" <DSS4u@+++nospam+++HOTMAIL.COM> wrote in message
news:YJRsf.5745$l87.536186@news20.bellglobal.com...

Yes. Generate the cert request on one server and then install it there.
Then export it and install it on the second server. Make sure the name on
your cert is the public name you will be using for OWA and not the name of
the cluster node.

-GT
"Andy Goodwin" <andyjg247@antispamhotmail.com> wrote in message
news:OPVH4SHDGHA.2300@TK2MSFTNGP15.phx.gbl...

Hi,

I am trying to setup a pair of servers in a active/passive cluster. I
don't currently have the option for a frontend server so the current live
server will be taking outlook 2003 clients plus I want to enable OWA. I
am testing this at the moment and have setup a CA to provide a cert for
one server and tested https access fine. Of course when I fail over the
cert isn't resident on the second server and https fails. I could create
a new cert for this second server im sure, however, I would imagine that
I would only purchase a single cert from verisign therefore my question
is: Is it possible to add the same cert onto both servers?

thanks
Andy





Make a back up of the cert once its created on the first server, then

copy it to the second server and import there. I think thats the point
Andy was trying to make.
Back to top
Andy Goodwin
Guest
Posted: Thu Dec 29, 2005 5:58 pm    Post subject: Re: Exchange 2003 Cluster and HTTPS OWA Reply with quote
Hi,

I have a copy of the cert. I can dbl click it an install but when I use IIS
I don't have any entries available for assign existing. The box is empty.
There are 2 import choices but they ask for .pfx or key manager backup files
not .cer files. The cert seems fine on the other member of the cluster but
of course this is the one that made the request.

thanks again for your time.

Andy

"Jason Meyer" <jason.meyer@nospam.isd623.org> wrote in message
news:%23p$ZqpIDGHA.3856@TK2MSFTNGP12.phx.gbl...
Quote:
Andy Goodwin wrote:
Hi,

Thanks for the reply.
To install the first cert I used IIS to create a request then created it
on my CA. I could then finalise the request on the first server. How
would I "finalise" this request on the second server without creating a
new cert request?
Or is there a different method?

thanks


"GT" <DSS4u@+++nospam+++HOTMAIL.COM> wrote in message
news:YJRsf.5745$l87.536186@news20.bellglobal.com...

Yes. Generate the cert request on one server and then install it there.
Then export it and install it on the second server. Make sure the name
on your cert is the public name you will be using for OWA and not the
name of the cluster node.

-GT
"Andy Goodwin" <andyjg247@antispamhotmail.com> wrote in message
news:OPVH4SHDGHA.2300@TK2MSFTNGP15.phx.gbl...

Hi,

I am trying to setup a pair of servers in a active/passive cluster. I
don't currently have the option for a frontend server so the current
live server will be taking outlook 2003 clients plus I want to enable
OWA. I am testing this at the moment and have setup a CA to provide a
cert for one server and tested https access fine. Of course when I fail
over the cert isn't resident on the second server and https fails. I
could create a new cert for this second server im sure, however, I would
imagine that I would only purchase a single cert from verisign therefore
my question is: Is it possible to add the same cert onto both servers?

thanks
Andy





Make a back up of the cert once its created on the first server, then copy
it to the second server and import there. I think thats the point Andy was
trying to make.
Back to top
 
Post new topic   Reply to topic    Exchange Server Forum Index -> Administration All times are GMT
Page 1 of 1

 
 You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum




Windows Server Dedicated Servers
New Topics Powered by phpBB