RPC over http and Digital Certificates!

[pogi05]

Sorry I'm a little new,

My question is in regards to the digital certificate i use when configuring the SLL on my RPC over HTTP:

When I create the Certification Authority and entering the Common Name for the (CA) do I put the Internal FQDN of the Server, or the external FQDN? I just want to confirm before I set it up.

for example if our setup was:

internalFQDN: Space.domain.local
externalFQDN: mail.domainName.com

What is the common name? (i assume mail.domainName.com)?

Online notes tell me "you MUST make sure that the COMMON NAME on the certificate is 100% identical to the External FQDN you've just typed!" (external FQDN they're referring to is the RPC Proxy Server typed into the settings of the Outlook Client)

Thanks, any input would help.

 

[strayrog]

Pogi,

You are right. The common name should be the externalFQDN when you apply for the cert. I just went through this because I cahnged out servers for my exchange.

Strayrog.