v-terliu
Fri Jul 04 00:48:22 PDT 2008
Hello Jamie,
Thank you for posting here.
First, please understand that our newsgroup is an issue based service,
meaning we usually respond to one question/issue per post. This will lessen
the confusion for both of us, as well as ensure that our results are
accurate and not a result of a test for a different question. Therefore, I
suggest you create a new post for getting further assistance.
Personally, to configure the Web Server Certificate on SBS, you can run the
CEICW and select "Do not change¡" option in the other pages. Then, the
CEICW will not configure other parts of the wizard.
However, we do not have a specific wizard to only configure Web Server
Certificate on SBS.
Thank you for your understanding.
Have a nice weekend.
Best regards,
Terence Liu (MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check
http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
>Thread-Topic: General Certificate Question
>thread-index: AcjdF7+HV6H2FQc+RFerxrdsAclxZA==
>X-WBNR-Posting-Host: 207.46.193.207
>From: =?Utf-8?B?SmFtaWU=?= <Jamie@discussions.microsoft.com>
>References: <4822def3@dnews.tpgi.com.au>
<UHmuo9ZsIHA.4284@TK2MSFTNGHUB02.phx.gbl>
>Subject: RE: General Certificate Question
>Date: Thu, 3 Jul 2008 07:19:04 -0700
>Lines: 153
>Message-ID: <5C2952EC-3929-44ED-8AB8-73B6F4C552E0@microsoft.com>
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 7bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2992
>Newsgroups: microsoft.public.windows.server.sbs
>Path: TK2MSFTNGHUB02.phx.gbl
>Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:113951
>NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>Is there a way to do just step g without going through the entire wizard?
>Thanks
>
>g. On the "Web Server Certificate" page, choose "Create a new Web server
>certificate" and key in your public domain name (MyCity.xyz.com.au) in the
>box.
>
>"Terence Liu [MSFT]" wrote:
>
>> Hello Geoff,
>>
>> Thank you for posting here.
>>
>> From the post, I understand you have problem about use certificate.
>>
>> From the description I know you have 2 sub domains. SBS could not have
sub
>> domain. Do you run SBS?
>>
>> If you do not run SBS, please repost your issue in Windows server
newsgroup
>> for further assistance.
>>
>> This newsgroup is primarily for issues involving deployment,
configuration,
>> consultation and troubleshooting. The reason why we recommend posting
>> appropriately is you will get the most qualified pool of respondents,
and
>> other partners who read the newsgroups regularly can either share their
>> knowledge or learn from your interaction with us.
>>
>> Windows server Newsgroup: microsoft.public.windows.server.general
>>
>> If you run SBS 2003, we do not need to buy 3rd-party certificate, the
CEICW
>> on SBS could create self-signed certificate. I suggest you perform the
>> following steps:
>>
>> 1. Run the CEICW to create self-signed certificate on SBS:
>>
>> a. Open Server Management.
>> b. Click To Do List.
>> c. Click Connect to the Internet.
>> d. Proceed to the "Firewall" page and select "Enable Firewall".
>> e. On the "Services Configuration" page, make sure that "E-mail" service
>> has been checked.
>> f. On the "Web Services Configuration" page, check the web services that
>> you want to publish, including OWA.
>> g. On the "Web Server Certificate" page, choose "Create a new Web server
>> certificate" and key in your public domain name (MyCity.xyz.com.au) in
the
>> box.
>> h. Finish the wizard.
>>
>> 2. Ensure your public domain name (MyCity.xyz.com.au) resolve to your
>> public IP address. Please contact your ISP to confirm.
>>
>> 3. Forward the TCP port 443 from your router to SBS.
>>
>> Then, you can access OWA via https://MyCity.xyz.com.au/exchange/
>>
>> I hope the information above is helpful.
>>
>> Thanks and have a nice day!
>>
>> Best regards,
>>
>> Terence Liu (MSFT)
>>
>> Microsoft CSS Online Newsgroup Support
>>
>> Get Secure! - www.microsoft.com/security
>>
>> =====================================================
>> This newsgroup only focuses on SBS technical issues. If you have issues
>> regarding other Microsoft products, you'd better post in the
corresponding
>> newsgroups so that they can be resolved in an efficient and timely
manner.
>> You can locate the newsgroup here:
>>
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
>>
>> When opening a new thread via the web interface, we recommend you check
the
>> "Notify me of replies" box to receive e-mail notifications when there
are
>> any updates in your thread. When responding to posts via your
newsreader,
>> please "Reply to Group" so that others may learn and benefit from your
>> issue.
>>
>> Microsoft engineers can only focus on one issue per thread. Although we
>> provide other information for your reference, we recommend you post
>> different incidents in different threads to keep the thread clean. In
doing
>> so, it will ensure your issues are resolved in a timely manner.
>>
>> For urgent issues, you may want to contact Microsoft CSS directly.
Please
>> check
http://support.microsoft.com for regional support phone numbers.
>>
>> Any input or comments in this thread are highly appreciated.
>> =====================================================
>>
>> This posting is provided "AS IS" with no warranties, and confers no
rights.
>>
>> --------------------
>> | From: "Geoff Schaller" <geoffx@softwarexobjectives.com.au>
>> | Subject: General Certificate Question
>> | Date: Thu, 8 May 2008 11:07:28 +0000
>> | Newsgroups: microsoft.public.windows.server.sbs
>> | X-Newsreader: NewsHound for Microsoft Outlook v2.1.0.45 (unicode)
>> | Mime-Version: 1.0
>> | Content-Transfer-Encoding: 8bit
>> | Content-Type: text/plain; charset=us-ascii; format=flowed
>> | NNTP-Posting-Host: 220.245.141.234
>> | X-Original-NNTP-Posting-Host: 220.245.141.234
>> | Message-ID: <4822def3@dnews.tpgi.com.au>
>> | X-Trace: dnews.tpgi.com.au!tpg.com.au 1210244851 220.245.141.234 (8
May
>> 2008 21:07:31 +1100)
>> | Lines: 35
>> | Path:
>>
TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTFEEDS02.phx.gbl!newsfeed.
>>
cw.net!cw.net!news-FFM2.ecrc.de!news.germany.com!solnet.ch!solnet.ch!nntp.gb
>> lx.net!nntp3.phx1!dnews.tpgi.com.au!tpg.com.au!not-for-mail
>> | Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:106770
>> | X-Tomcat-NG: microsoft.public.windows.server.sbs
>> |
>> | Hi Folks,
>> |
>> | This is a beginner certificate question please. Looking for general
>> | advice. We've wanted to roll out OWA and VPNs protected by
certificates
>> | but were wondering how we go about it. We also need it for
ReportServer
>> | under 2008 and a few other things.
>> |
>> | Question 1: Basically, the certs I generated on our server are never
>> | considered 'trustworthy' for OWA to swallow so my question is that I
>> | presume we have to buy one from one of the 10 or so prime cert
>> | generators.
>> |
>> | Question 2: what do we really need in order to get off the ground? It
>> | seems you can pay $100 or $10,000. We have one central server and two
>> | sub domains and all the usual add-ons (sql server etc).
>> |
>> | Question 3: having one cert, can I generate my own certs from this
that
>> | will now be trusted by OWA etc? There are about 8 products needing a
>> | cert or do they all reference the same cert? What about the
subordinate
>> | SBS servers we have?
>> |
>> | The domain xyz.com.au is hosted on an ISP site somewhere in the sky.
>> | The site where I need the certificate is at MyCity.xyz.com.au (sub
>> | domain)
>> | ...and then we other servers at City2.xyz.com.au and so on.
>> |
>> | Is a single certificate all I need and what should I name it:
xyz.com.au
>> | or MyCity.xyz.com.au
>> |
>> | This is a little confusing at the start and I hope I've made myself
>> | clear.
>> |
>> | Geoff
>> |
>> |
>> |
>>
>>
>