Multiple CAS - Best practice with certificate request

Status
Not open for further replies.
R

RolandNL

When you create a certificate request from a Client Access Server, you need the Certificate Signing Request (CSR) and give this to the certificate organisation you get the certificate from. But how do you need to do this when you have 2 or more Client Access Servers? Do you need to request a certificate for each Client Access Server? Or can you just use one request for both Client Access Servers?

Please give me some advise.

Thanks in advance,

Roland
 
B

Brian Day MCITP

Whether or not you need to buy more than one cert depends on who you are buying it from. Some of them will allow you to use one cert on multiple machines, others won't. If your CA allows you to put it on multiple machines then the process is this...
Create CSR on one CAS server Send CSR to Cert Authority Receive reponse from CA and mark the private key as exportable when you import the response (At this point you have a working Cert on one CAS server) Export the Cert *with* the private key from one CAS server Import the cert to the other CAS servers. Microsoft Premier Field Engineer, Exchange
MCSA 2000/2003, CCNA
MCITP: Enterprise Messaging Administrator 2010
Former Microsoft MVP, Exchange Server
My posts are provided "AS IS" with no guarantees, no warranties, and they confer no rights.
 
S

Sembee [MVP]

Usually it is a single certificate on one server, then exported to the other server. That will mean the request will need to include both server names in it.
The reason for this is to get cover for autodiscover.example.com. Most SSL providers will only allow one certificate with a certain name to be active at any one time. Therefore with multiple certificates only one would be able to hold the autodiscover entry.

Simon.

Simon Butler, Exchange MVP
Blog | Exchange Resources
 
B

Brian Day MCITP

Usually it is a single certificate on one server, then exported to the other server. That will mean the request will need to include both server names in it.
The reason for this is to get cover for autodiscover.example.com. Most SSL providers will only allow one certificate with a certain name to be active at any one time. Therefore with multiple certificates only one would be able to hold the autodiscover entry.

Simon.
Simon Butler, Exchange MVP
Blog | Exchange Resources
As mentioned, this various between vendors. You can usually purchase a cert with various SAN names on it (Which in 99.999999% of deployments will not need the CAS FQDNs) and then tell the vendor how many CAS servers it'll be used on at one time for them to charge accordingly.

Morale of the story is to check with your vendor as your mileage may vary. :)

Microsoft Premier Field Engineer, Exchange
MCSA 2000/2003, CCNA
MCITP: Enterprise Messaging Administrator 2010
Former Microsoft MVP, Exchange Server
My posts are provided "AS IS" with no guarantees, no warranties, and they confer no rights.
 
G

Gavin-Zhang

Hi Roland,
Above gave some good suggestion.
I would verify more information regarding to your issue.
1. Does the certificate used only for external users, or would be used for internal and external users?
2. What about your exernal URL for your exchange service, that means which FQDN would be used for external, is it same as your internal URL for the internal users?
3. If you have multiple CASs, do you use the LB and set them as a array?
Above would affect that how do you request the certificate from the CA vender.
And there are many DOC in the technet about how to issue the CERT for external and internal. You could get them easily.
Such as: http://technet.microsoft.com/en-us/library/bb400932.aspx
Regards!
Gavin
 
Status
Not open for further replies.
Similar threads
Thread starter Title Forum Replies Date
S Load balance Autodiscover with multiple CAS servers. Exchange Server Administration 2
S Load balance Autodiscover with multiple CAS servers. Exchange Server Administration 3
H Re: Multiple OWA sites on one CAS 2010 server? Exchange Server Administration 14
C Outlook with Office365 - search across account, by date rate, in multiple folders - how? Using Outlook 1
E Asking user to select multiple options in a list in an email Outlook VBA and Custom Forms 0
A Multiple signatures Using Outlook 2
O Outlook tasks - Add text column with multiple lines Using Outlook 3
R How to get the Items object of the default mailbox of a specific account in a multiple account Outlook? Outlook VBA and Custom Forms 0
I Saving attachments from multiple emails and updating file name Outlook VBA and Custom Forms 0
L Multiple Inboxes Using Outlook 3
RBLampert Accessing Outlook accounts from multiple computers Using Outlook 8
Martull Forced signature when multiple accounts exist Outlook VBA and Custom Forms 4
T Outlook 2010 Correct way to map multiple contact fields Using Outlook 4
Y Open and Save Hyperlink Files in multiple emails Outlook VBA and Custom Forms 9
O Multiple email accounts - hesitate to create a new profile Using Outlook 3
papa.deblanc Multiple Instances Using Outlook 6
V Multiple Calendars in Outlook To-Do Bar; Office 365 Using Outlook 3
A Add multiple servers "on behalf of" email to "safe senders" list. Using Outlook 1
M possible to search Outlook for multiple email addresses at once? Using Outlook 1
C Macro to add multiple recipients to message Outlook VBA and Custom Forms 3
D [TOOL] QuickModules to sort emails very quickly to multiple folders Outlook VBA and Custom Forms 1
A Multiple Outlook Invites Received by One Person Using Outlook 4
N Selecting multiple calendar items Using Outlook 4
F Sharepoint tasks from multiple accounts in To-Do List Using Outlook 8
N Multiple instances of Outlook on Start Menu Using Outlook 2
D Edit Subject (Multiple Accounts) Outlook VBA and Custom Forms 5
B VBA Macro for assigning multiple Categories to an email in my Inbox Outlook VBA and Custom Forms 1
L Need to import multiple Outlook files to Office 365 Account Using Outlook 4
B Deleting multiple accounts Using Outlook 1
I Dialog called up multiple times when saving emails from macro Outlook VBA and Custom Forms 2
M Multiple spurious empty folders appear in archive files Using Outlook 3
G Bcc help - Preventing multiple forwards from a bcc'd distribution group Using Outlook 1
J Outlook Rules - Changing auto-submit address in multiple rules, according to rule name Outlook VBA and Custom Forms 0
F Send multiple batch tasks to single person Using Outlook 3
M Multiple workstations and multiple accounts - keep in sync? Using Outlook.com accounts in Outlook 2
A Sending Emails Through Outlook From Multiple Email Addresses Using Outlook 1
S How to extract mail items from multiple folders and shared mailboxes? Outlook VBA and Custom Forms 0
A open Outlook with multiple windows. Using Outlook 0
M Ensure the same inbox view across multiple outlook instances Using Outlook.com accounts in Outlook 7
D Multiple mailboxes, 1 certificate. How to prevent message "Invalid Certificate" Using Outlook 0
R Using Multiple Accounts in Outlook Using Outlook 3
D Multiple Accounts Issue Receiving Emails in 2016 Using Outlook 0
M Multiple User Defined Fields that can be added, changed, updated using VBA and user form Outlook VBA and Custom Forms 0
Diane Poremsky Combine and Print Multiple Outlook Calendars New Slipstick.com Articles 0
Jeanne Goodman Create Printout from Multiple Shared Calendars Outlook VBA and Custom Forms 8
Y Creating custom appointment request form with multiple mail recipients Outlook VBA and Custom Forms 5
B Macro To Create Rule To Export From Certain Folder Email Information in one workbook multiple sheets Outlook VBA and Custom Forms 0
Diane Poremsky Select Multiple Calendars in Outlook New Slipstick.com Articles 0
B Search Folder for search messages in more than one account and / or multiple PST folders Using Outlook 3
Cameron Piper Automatically update custom forms across multiple computers Outlook VBA and Custom Forms 1

Similar threads

Top