{"id":512,"date":"2009-05-30T12:50:00","date_gmt":"2009-05-30T12:50:00","guid":{"rendered":"https:\/\/brainlitter.itgroove.net\/2009\/05\/30\/how-to-implement-ssl-certs-for-owa-etc-in-exchange-2007\/"},"modified":"2009-05-30T12:50:00","modified_gmt":"2009-05-30T12:50:00","slug":"how-to-implement-ssl-certs-for-owa-etc-in-exchange-2007","status":"publish","type":"post","link":"https:\/\/regroove.ca\/brainlitter\/2009\/05\/30\/how-to-implement-ssl-certs-for-owa-etc-in-exchange-2007\/","title":{"rendered":"How to implement SSL Certs (for OWA, etc.) in Exchange 2007"},"content":{"rendered":"<div class=\"ExternalClass7BCD22966B334BF7A955BE01ADBF9CA4\">\n<p>These instructions were prepared for QuoVadis (great place to get your SSL and Unified UCC SAN Certs from \u2013 <a>www.quovadis.bm<\/a><\/p>\n<p><a href=\"https:\/\/www.quovadisglobal.bm\/\"><img decoding=\"async\" src=\"\/brainlitterarchive\/Lists\/Photos\/053009_1949_Howtoimplem1.gif\" alt=\"\" border=\"0\"><\/a><\/p>\n<\/p>\n<h1>Document Deliverables<\/h1>\n<p style=\"text-align:justify\"><span style=\"font-size:10pt\"><a name=\"OLE_LINK3\">Microsoft Exchange 2007 requires SSL certificates to be configured\/installed in a particular manner, to ensure support of the various &#8216;Subject Alternative Names&#8217; the server might be found on, depending on the service one is trying to connect to, via SSL (OWA, ActiveSync, Outlook Anywhere).<\/span><\/p>\n<\/p>\n<h1>Document Expectations<\/h1>\n<ul>\n<li>\n<div style=\"text-align:justify\"><span style=\"font-size:10pt\">This document is intended to briefly summarize the steps to take, to apply an SSL certificate, to a standalone Exchange 2007 Server, in order to provision SSL security\/protection of an Exchange 2007 Server.<\/span><\/div>\n<\/li>\n<li>\n<div style=\"text-align:justify\"><span style=\"font-size:10pt\">This document assumes that the SSL certificate will be provisioned by QuoVadis (<a href=\"https:\/\/www.quovadis.bm\"><\/span><strong>www.quovadis.bm<\/strong><span style=\"font-size:10pt\">) and the CSR will be submitted to them.<\/span><\/div>\n<\/li>\n<\/ul>\n<h1>Out of Scope<\/h1>\n<p><span style=\"font-size:10pt\">This document will assumes Exchange 2007 is installed, configured correctly and that TCP443 (SSL) traffic is enabled inbound\/outbound on your firewall (for external access) and the appropriate FQDN (Fully Qualified Domain Name) are defined and resolvable. <\/span><\/p>\n<\/p>\n<h1>Overview and Background<\/h1>\n<p><span style=\"font-size:10pt\">The certs created in this document were for itgroove Professional Services Ltd. The Exchange Server (2007) being accessed, is referenced by the primary URL of webmail.itgroove.org.<\/span><\/p>\n<\/p>\n<p><span style=\"font-size:10pt\">During the cert process, you will want to know all of the &#8216;Subject Alternative Names&#8217; that may be used to reference this server, including <strong><em>Autodiscover<\/em><\/strong> functionality (out of scope of this document).  Thus, for the purposes of this document, the SAN&#8217;s for this Exchange Server 2007 installation are the following (:<\/span><\/p>\n<\/p>\n<ul>\n<li><span style=\"font-size:10pt\"><strong>webmail.itgroove.org<\/strong> (the primary URL used)<\/span><\/li>\n<li><span style=\"font-size:10pt\"><strong>autodiscover.itgroove.org<\/strong> (autodiscover URL chosen)<\/span><\/li>\n<li><span style=\"font-size:10pt\">autodiscover.itgroove.net (unique to itgroove, as SMTP domain is different \u2013 itgroove.net), this secondary entry may not apply unless the SMTP primary domain is different from the URL used for OWA<\/span><\/li>\n<li><span style=\"font-size:10pt\"><strong>itgca1vmg01<\/strong> (the NetBIOShostname of the actual Exchange Server)<\/span><\/li>\n<li><span style=\"font-size:10pt\"><strong>itgca1vmg01.itgroove.org<\/strong> (the FQDN of the server on the client network\/LAN)<\/span><\/li>\n<\/ul>\n<p><em>*Note, in Exchange 2007, the OWA application is now located at <a href=\"https:\/\/server\/owa\">https:\/\/server\/<strong>owa<\/strong><\/a><\/em><\/p>\n<\/p>\n<div>\n<table style=\"border-collapse:collapse\" border=\"0\">\n<col style=\"width:312px\">\n<col style=\"width:15px\">\n<col style=\"width:312px\">\n<tbody valign=\"top\">\n<tr>\n<td style=\"padding-left:7px;padding-right:7px\">\n<p><img decoding=\"async\" src=\"\/brainlitterarchive\/Lists\/Photos\/053009_1949_Howtoimplem2.png\" alt=\"\"><\/p>\n<\/td>\n<td style=\"padding-left:7px;padding-right:7px\">\u00a0<\/td>\n<td style=\"padding-left:7px;padding-right:7px\">\n<p><img decoding=\"async\" src=\"\/brainlitterarchive\/Lists\/Photos\/053009_1949_Howtoimplem3.png\" alt=\"\"><\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/p>\n<h1>Steps to Acquire and Install SSL on Exchange 2007<\/h1>\n<p><span style=\"font-size:10pt\">There are several steps required, to enable SSL correctly for Exchange Server 2007.  The process is outlined below.<\/span><\/p>\n<\/p>\n<p><img decoding=\"async\" src=\"\/brainlitterarchive\/Lists\/Photos\/053009_1949_Howtoimplem4.png\" alt=\"\"><span style=\"font-size:10pt\"><\/span><\/p>\n<\/p>\n<div>\n<table style=\"border-collapse:collapse\" border=\"0\">\n<col style=\"width:408px\">\n<col style=\"width:478px\">\n<tbody valign=\"top\">\n<tr>\n<td colspan=\"2\" style=\"padding-left:7px;padding-right:7px\">\n<p><h1>Generate the certificate request<\/h1>\n<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td colspan=\"2\" style=\"padding-left:7px;padding-right:7px\">\n<p style=\"text-align:justify\">\n<ol>\n<li>\n<div style=\"text-align:justify\"><span style=\"font-size:10pt\">Open the Exchange Management Shell.<\/span><\/div>\n<\/li>\n<li>\n<div style=\"text-align:justify\"><span style=\"font-size:10pt\">Run the following command, replacing <strong>domainname<\/strong> and <strong>friendlyname<\/strong> values with your domain name and display name and specify the path for the CSR file (values below underlined in bold, are the values you change).<\/span><\/div>\n<\/li>\n<\/ol>\n<p style=\"margin-left:18pt\">\n<p><span style=\"color:#76923c;font-family:Courier New;font-size:10pt\">New-ExchangeCertificate -GenerateRequest -domainname <span style=\"text-decoration:underline\"><strong>webmail.itgroove.org<\/strong><\/span>,<span style=\"text-decoration:underline\"><strong>autodiscover.itgroove.org<\/strong><\/span>,<span style=\"text-decoration:underline\"><strong>autodiscover.itgroove.net<\/strong><\/span>,<span style=\"text-decoration:underline\"><strong>itgca1vmg01<\/strong><\/span>,<span style=\"text-decoration:underline\"><strong>itgca1vmg01.itgroove.org<\/strong><\/span> -FriendlyName <span style=\"text-decoration:underline\"><strong>webmail.itgroove.org<\/strong><\/span> -privatekeyexportable:$true -path c:<span style=\"text-decoration:underline\"><strong>webmail.itgroove.org_submit_to_QuoVadis<\/strong><\/span>.txt<\/span><\/p>\n<\/p>\n<p><span style=\"font-size:9pt\"><em>Note: &#8220;DomainName&#8221; is used to populate one or more domain names (FQDNs) or server names in the resulting certificate request.<\/em><\/span><\/p>\n<p><span style=\"font-size:9pt\"><em>Note: &#8220;FriendlyName&#8221; is used to specify a display name for the resulting certificate. The display name must be fewer than 64 characters<\/em>.<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td colspan=\"2\" style=\"padding-left:7px;padding-right:7px\">\n<p><img decoding=\"async\" src=\"\/brainlitterarchive\/Lists\/Photos\/053009_1949_Howtoimplem5.png\" alt=\"\"><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"padding-left:7px;padding-right:7px\">\u00a0<\/td>\n<td style=\"padding-left:7px;padding-right:7px\">\u00a0<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<table style=\"border-collapse:collapse\" border=\"0\">\n<col style=\"width:295px\">\n<col style=\"width:362px\">\n<tbody valign=\"top\">\n<tr>\n<td colspan=\"2\" style=\"padding-left:7px;padding-right:7px\">\u00a0<\/td>\n<\/tr>\n<tr>\n<td colspan=\"2\" style=\"padding-left:7px;padding-right:7px\">\n<p><span style=\"color:#17365d;font-size:13pt\"><strong>Submit the request to QuoVadis to have the certificate generated<\/p>\n<h2><\/h2>\n<p><\/strong><\/span><\/p>\n<p><span style=\"font-size:10pt\">Go to <a href=\"http:\/\/www.quovadis.bm\">http:\/\/www.quovadis.bm<\/a> and start the SSL purchase process and submit the CSR you created in the previous step (the file is located at c:webmail.itgroove.org_submit_to_QuoVadis.txt, unless you specified something different).<\/span><span style=\"font-size:9pt\"><\/span><\/p>\n<\/p>\n<p style=\"text-align:center\"><img decoding=\"async\" src=\"\/brainlitterarchive\/Lists\/Photos\/053009_1949_Howtoimplem6.png\" alt=\"\"><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"padding-left:7px;padding-right:7px\">\u00a0<\/td>\n<td style=\"padding-left:7px;padding-right:7px\">\u00a0<\/td>\n<\/tr>\n<tr>\n<td colspan=\"2\" style=\"padding-left:7px;padding-right:7px\">\n<p><h2>Enable the certificate on the Default Web site<\/h2>\n<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td colspan=\"2\" style=\"padding-left:7px;padding-right:7px\">\n<p><span style=\"font-size:10pt\">After your certificate has been generated by QuoVadis, you must import it and then enable the certificate on the Default Web site.  From the computer where the previous steps were run, import the certificate. To import the certificate, do the following:<\/span><\/p>\n<p style=\"text-align:justify\">\n<\/p>\n<ol>\n<li><span style=\"font-size:10pt\">Open the Exchange Management Shell.<\/span><\/li>\n<li><span style=\"font-size:10pt\">Run the following command. <\/span><span style=\"color:#76923c;font-family:Courier New;font-size:9pt\">Import-ExchangeCertificate -path c:QV_Generated_Cert.cer<\/span><span style=\"font-size:10pt\"><\/span><\/li>\n<li>\n<div style=\"text-align:justify\"><span style=\"font-size:10pt\">Note: &#8221; QV_Generated_Cert.cer&#8221; is the location and name of your certificate, that was provided by QuoVadis<\/span><\/div>\n<p><span style=\"font-size:10pt\">\u00a0\u00a0\u00a0\u00a0<\/span><\/p>\n<\/li>\n<\/ol>\n<p><h2>Copy the thumbprint of the certificate, which is the digest of the certificate data, to the clipboard by doing the following:<\/h2>\n<\/p>\n<\/p>\n<ol>\n<li><span style=\"font-size:10pt\">Open the Exchange Management Shell.<\/span><\/li>\n<li><span style=\"font-size:10pt\">Run the following command: <span style=\"color:#76923c;font-family:Courier New\">dir cert:LocalMachineMy | fl<\/span><\/span><\/li>\n<li><span style=\"font-size:10pt\">Locate the certificate that you just imported by finding the one that matches FriendlyName from the cert generation step (in our example, webmail.itgroove.org). Then copy the <strong><em>Thumbprint<\/em><\/strong> property of that certificate to the Windows Clipboard.<\/span><\/li>\n<\/ol>\n<\/p>\n<p><h2>Enable the certificate on the Default Web site:<\/h2>\n<\/p>\n<ol>\n<li><span style=\"font-size:10pt\">Open the Exchange Management Shell.<\/span><\/li>\n<li><span style=\"font-size:10pt\">Run the following command:<\/span><\/li>\n<\/ol>\n<\/p>\n<p><span style=\"color:#76923c;font-family:Courier New;font-size:10pt\">enable-ExchangeCertificate -thumbprint &lt;<span style=\"text-decoration:underline\"><strong><em>value copied to the Clipboard<\/em><\/strong><\/span>&gt; -services &#8220;IIS,IMAP,POP&#8221;<\/span><\/p>\n<\/p>\n<p><span style=\"font-size:10pt\">Using the &#8220;enable-ExchangeCertificate&#8221; cmdlet will update the certificate mapping, replacing the self-signed certificate that is installed by default with Exchange 2007 and configured in IIS, IMAP4, POP3.<\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td colspan=\"2\" style=\"padding-left:7px;padding-right:7px\">\u00a0<\/td>\n<\/tr>\n<tr>\n<td colspan=\"2\" style=\"padding-left:7px;padding-right:7px\">\n<p><span style=\"color:#17365d;font-size:13pt\"><strong>Require the Client Access server virtual directories to use SSL<\/p>\n<h2><\/h2>\n<p><\/strong><\/span><\/p>\n<p><span style=\"font-size:10pt\">By default, the Default Web site in IIS is configured to require SSL for all virtual directories except the offline address book virtual directory. However, you can configure additional virtual directories for each Client Access feature. You must confirm that each virtual directory is configured to require SSL.<\/span><\/p>\n<\/p>\n<p><span style=\"font-size:10pt\">The Client Access virtual directories are as follows:<\/span><\/p>\n<\/p>\n<ol style=\"margin-left:54pt\">\n<li><span style=\"font-size:10pt\">Outlook Web Access 2007 virtual directory:  <\/span><span style=\"color:#943634\"><strong>owa<\/strong><\/span><span style=\"font-size:10pt\"><\/span><\/li>\n<li><span style=\"font-size:10pt\">Outlook Web Access 2003 and WebDAV virtual directories: <\/span><span style=\"color:#943634\"><strong>exchange<\/strong><\/span><span style=\"font-size:10pt\"> and <\/span><span style=\"color:#943634\"><strong>public<\/strong><\/span><span style=\"font-size:10pt\"><\/span><\/li>\n<li><span style=\"font-size:10pt\">Exchange ActiveSync virtual directory: <\/span><span style=\"color:#943634\"><strong>Microsoft-Server-ActiveSync<\/strong><\/span><span style=\"font-size:10pt\"><\/span><\/li>\n<li><span style=\"font-size:10pt\">Outlook Anywhere virtual directory: <\/span><span style=\"color:#943634\"><strong>Rpc<\/strong><\/span><span style=\"font-size:10pt\"><\/span><\/li>\n<li><span style=\"font-size:10pt\">Autodiscover virtual directory: <\/span><span style=\"color:#943634\"><strong>Autodiscover<\/strong><\/span><span style=\"font-size:10pt\"><\/span><\/li>\n<li><span style=\"font-size:10pt\">Exchange Web Services virtual directory: <\/span><span style=\"color:#943634\"><strong>EWS<\/strong><\/span><span style=\"font-size:10pt\"><\/span><\/li>\n<li><span style=\"font-size:10pt\">Unified Messaging virtual directory: Unified <\/span><span style=\"color:#943634\"><strong>Messaging<\/strong><\/span><span style=\"font-size:10pt\"><\/span><\/li>\n<li><span style=\"font-size:10pt\">Offline Address Book virtual directory: <\/span><span style=\"color:#943634\"><strong>OAB<\/strong><\/span><span style=\"font-size:10pt\"><\/span><\/li>\n<\/ol>\n<\/p>\n<p><span style=\"font-size:10pt\">For each of the Client Access virtual directories (above in <\/span><span style=\"color:#943634\"><strong>RED<\/strong><\/span><span style=\"font-size:10pt\">) that you will use, open Internet Information Services (IIS) Manager, and follow these steps:<\/span><\/p>\n<\/p>\n<ol>\n<li><span style=\"font-size:10pt\">Under Default Web site, select the virtual directory that you want, for example, &#8220;<strong>owa<\/strong>&#8220;.<\/span><\/li>\n<li><span style=\"font-size:10pt\">Right-click the virtual directory, and then click &#8220;Properties&#8221;.<\/span><\/li>\n<li><span style=\"font-size:10pt\">Click the &#8220;Directory Security&#8221; tab.<\/span><\/li>\n<li><span style=\"font-size:10pt\">In the &#8220;Secure Communications&#8221; section, click &#8220;Edit&#8221;.<\/span><\/li>\n<li><span style=\"font-size:10pt\">In the &#8220;Secure Communications&#8221; dialog box, make sure that both the &#8220;Require secure channel (SSL)&#8221; check box and the &#8220;Require 128-bit encryption&#8221; check box are selected.<\/span><\/li>\n<li><span style=\"font-size:10pt\">Click &#8220;OK&#8221; to save your changes.<\/span><\/li>\n<li><span style=\"font-size:10pt\">Finally, Restart the POP3 and IMAP4 services by opening the Services Windows administrative tool, selecting &#8220;Microsoft Exchange POP3&#8221; or &#8220;Microsoft Exchange IMAP4&#8221;, right-clicking the name of the service, and then clicking &#8220;Restart&#8221;. IIS does not have to be restarted.  Alternatively, restart the Server<\/span><\/li>\n<\/ol>\n<p><span style=\"font-size:10pt\"><\/span>\u00a0<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td colspan=\"2\" style=\"padding-left:7px;padding-right:7px\">\n<p><span style=\"color:#17365d;font-size:13pt\"><strong>Ensure Client Access Settings Are Correct<\/strong><\/span><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td colspan=\"2\" style=\"padding-left:7px;padding-right:7px\">\n<p>Finally, it is important to set\/verify the URL&#8217;s in use, in the &#8216;Client Access&#8217; settings, in the &#8216;Server Configuration&#8217; options of the Exchange Management Console.<\/p>\n<p style=\"text-align:justify\">\n<p style=\"text-align:justify\">\n<ol>\n<li>\n<div style=\"text-align:justify\">Open the Exchange Management Console<\/div>\n<\/li>\n<li>\n<div style=\"text-align:justify\">Go to the &#8216;Outlook Web Access&#8217; tab and choose the &#8216;OWA&#8217; value<\/div>\n<\/li>\n<li>\n<div style=\"text-align:justify\">Validate or change to match, the URL&#8217;s on the General Tab, for the Internal and External URL&#8217;s (in our example, these are set to <a href=\"https:\/\/webmail.itgroove.org\/owa\">https:\/\/webmail.itgroove.org\/owa<\/a><\/div>\n<\/li>\n<\/ol>\n<p style=\"text-align:center\"><img decoding=\"async\" src=\"\/brainlitterarchive\/Lists\/Photos\/053009_1949_Howtoimplem7.png\" alt=\"\"><\/p>\n<p style=\"text-align:center\">\n<ol>\n<li>Perform the same actions for the other services you are utilizing including:<\/li>\n<\/ol>\n<ul style=\"margin-left:54pt\">\n<li>Exchange ActiveSync<\/li>\n<li>Offline Address Book Distribution<\/li>\n<li>POP3 and IMAP4<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>These instructions were prepared for QuoVadis (great place to get your SSL and Unified UCC SAN Certs from \u2013 www.quovadis.bm Document Deliverables Microsoft Exchange 2007 requires SSL certificates to be configured\/installed in a particular manner, to ensure support of the various &#8216;Subject Alternative Names&#8217; the server might be found on, depending on the service one &hellip; <a href=\"https:\/\/regroove.ca\/brainlitter\/2009\/05\/30\/how-to-implement-ssl-certs-for-owa-etc-in-exchange-2007\/\"><\/a><\/p>\n","protected":false},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":"","_jetpack_memberships_contains_paid_content":false},"categories":[4,433,39],"tags":[],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.0 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>How to implement SSL Certs (for OWA, etc.) in Exchange 2007 - Brainlitter - Inside the mind of Sean Wallbridge<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/regroove.ca\/brainlitter\/2009\/05\/30\/how-to-implement-ssl-certs-for-owa-etc-in-exchange-2007\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to implement SSL Certs (for OWA, etc.) in Exchange 2007 - Brainlitter - Inside the mind of Sean Wallbridge\" \/>\n<meta property=\"og:description\" content=\"These instructions were prepared for QuoVadis (great place to get your SSL and Unified UCC SAN Certs from \u2013 www.quovadis.bm Document Deliverables Microsoft Exchange 2007 requires SSL certificates to be configured\/installed in a particular manner, to ensure support of the various &#8216;Subject Alternative Names&#8217; the server might be found on, depending on the service one &hellip;\" \/>\n<meta property=\"og:url\" content=\"https:\/\/regroove.ca\/brainlitter\/2009\/05\/30\/how-to-implement-ssl-certs-for-owa-etc-in-exchange-2007\/\" \/>\n<meta property=\"og:site_name\" content=\"Brainlitter - Inside the mind of Sean Wallbridge\" \/>\n<meta property=\"article:published_time\" content=\"2009-05-30T12:50:00+00:00\" \/>\n<meta name=\"author\" content=\"Sean Wallbridge\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Sean Wallbridge\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/regroove.ca\/brainlitter\/2009\/05\/30\/how-to-implement-ssl-certs-for-owa-etc-in-exchange-2007\/\",\"url\":\"https:\/\/regroove.ca\/brainlitter\/2009\/05\/30\/how-to-implement-ssl-certs-for-owa-etc-in-exchange-2007\/\",\"name\":\"How to implement SSL Certs (for OWA, etc.) in Exchange 2007 - Brainlitter - Inside the mind of Sean Wallbridge\",\"isPartOf\":{\"@id\":\"https:\/\/regroove.ca\/brainlitter\/#website\"},\"datePublished\":\"2009-05-30T12:50:00+00:00\",\"dateModified\":\"2009-05-30T12:50:00+00:00\",\"author\":{\"@id\":\"https:\/\/regroove.ca\/brainlitter\/#\/schema\/person\/74e1c0def190f181c1394c2b6d883e77\"},\"breadcrumb\":{\"@id\":\"https:\/\/regroove.ca\/brainlitter\/2009\/05\/30\/how-to-implement-ssl-certs-for-owa-etc-in-exchange-2007\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/regroove.ca\/brainlitter\/2009\/05\/30\/how-to-implement-ssl-certs-for-owa-etc-in-exchange-2007\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/regroove.ca\/brainlitter\/2009\/05\/30\/how-to-implement-ssl-certs-for-owa-etc-in-exchange-2007\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Brainlitter\",\"item\":\"https:\/\/regroove.ca\/brainlitter\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How to implement SSL Certs (for OWA, etc.) in Exchange 2007\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/regroove.ca\/brainlitter\/#website\",\"url\":\"https:\/\/regroove.ca\/brainlitter\/\",\"name\":\"Brainlitter - Inside the mind of Sean Wallbridge\",\"description\":\"Dad. Husband. Drummer. Learner of Things.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/regroove.ca\/brainlitter\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/regroove.ca\/brainlitter\/#\/schema\/person\/74e1c0def190f181c1394c2b6d883e77\",\"name\":\"Sean Wallbridge\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/regroove.ca\/brainlitter\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/adf8cea6291c39d166616f2148d919a6?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/adf8cea6291c39d166616f2148d919a6?s=96&d=mm&r=g\",\"caption\":\"Sean Wallbridge\"},\"url\":\"https:\/\/regroove.ca\/brainlitter\/author\/swallbridge\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How to implement SSL Certs (for OWA, etc.) in Exchange 2007 - Brainlitter - Inside the mind of Sean Wallbridge","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/regroove.ca\/brainlitter\/2009\/05\/30\/how-to-implement-ssl-certs-for-owa-etc-in-exchange-2007\/","og_locale":"en_US","og_type":"article","og_title":"How to implement SSL Certs (for OWA, etc.) in Exchange 2007 - Brainlitter - Inside the mind of Sean Wallbridge","og_description":"These instructions were prepared for QuoVadis (great place to get your SSL and Unified UCC SAN Certs from \u2013 www.quovadis.bm Document Deliverables Microsoft Exchange 2007 requires SSL certificates to be configured\/installed in a particular manner, to ensure support of the various &#8216;Subject Alternative Names&#8217; the server might be found on, depending on the service one &hellip;","og_url":"https:\/\/regroove.ca\/brainlitter\/2009\/05\/30\/how-to-implement-ssl-certs-for-owa-etc-in-exchange-2007\/","og_site_name":"Brainlitter - Inside the mind of Sean Wallbridge","article_published_time":"2009-05-30T12:50:00+00:00","author":"Sean Wallbridge","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Sean Wallbridge","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/regroove.ca\/brainlitter\/2009\/05\/30\/how-to-implement-ssl-certs-for-owa-etc-in-exchange-2007\/","url":"https:\/\/regroove.ca\/brainlitter\/2009\/05\/30\/how-to-implement-ssl-certs-for-owa-etc-in-exchange-2007\/","name":"How to implement SSL Certs (for OWA, etc.) in Exchange 2007 - Brainlitter - Inside the mind of Sean Wallbridge","isPartOf":{"@id":"https:\/\/regroove.ca\/brainlitter\/#website"},"datePublished":"2009-05-30T12:50:00+00:00","dateModified":"2009-05-30T12:50:00+00:00","author":{"@id":"https:\/\/regroove.ca\/brainlitter\/#\/schema\/person\/74e1c0def190f181c1394c2b6d883e77"},"breadcrumb":{"@id":"https:\/\/regroove.ca\/brainlitter\/2009\/05\/30\/how-to-implement-ssl-certs-for-owa-etc-in-exchange-2007\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/regroove.ca\/brainlitter\/2009\/05\/30\/how-to-implement-ssl-certs-for-owa-etc-in-exchange-2007\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/regroove.ca\/brainlitter\/2009\/05\/30\/how-to-implement-ssl-certs-for-owa-etc-in-exchange-2007\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Brainlitter","item":"https:\/\/regroove.ca\/brainlitter\/"},{"@type":"ListItem","position":2,"name":"How to implement SSL Certs (for OWA, etc.) in Exchange 2007"}]},{"@type":"WebSite","@id":"https:\/\/regroove.ca\/brainlitter\/#website","url":"https:\/\/regroove.ca\/brainlitter\/","name":"Brainlitter - Inside the mind of Sean Wallbridge","description":"Dad. Husband. Drummer. Learner of Things.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/regroove.ca\/brainlitter\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/regroove.ca\/brainlitter\/#\/schema\/person\/74e1c0def190f181c1394c2b6d883e77","name":"Sean Wallbridge","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/regroove.ca\/brainlitter\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/adf8cea6291c39d166616f2148d919a6?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/adf8cea6291c39d166616f2148d919a6?s=96&d=mm&r=g","caption":"Sean Wallbridge"},"url":"https:\/\/regroove.ca\/brainlitter\/author\/swallbridge\/"}]}},"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/regroove.ca\/brainlitter\/wp-json\/wp\/v2\/posts\/512"}],"collection":[{"href":"https:\/\/regroove.ca\/brainlitter\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/regroove.ca\/brainlitter\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/regroove.ca\/brainlitter\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/regroove.ca\/brainlitter\/wp-json\/wp\/v2\/comments?post=512"}],"version-history":[{"count":0,"href":"https:\/\/regroove.ca\/brainlitter\/wp-json\/wp\/v2\/posts\/512\/revisions"}],"wp:attachment":[{"href":"https:\/\/regroove.ca\/brainlitter\/wp-json\/wp\/v2\/media?parent=512"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/regroove.ca\/brainlitter\/wp-json\/wp\/v2\/categories?post=512"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/regroove.ca\/brainlitter\/wp-json\/wp\/v2\/tags?post=512"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}