How to use a single certificate for all domains in the panel
Is there a way to use a single UCC certificate for all the domains in the panel?
You do NOT put your client domains in your SSL certificate. You can use a single wildcard of UCC for the basic Exchange services (like a normal on-premsis). You use autodiscover redirect method or SRV records or both to provide autodiscover to the clients.
Please look up Autodiscover Redirect Method.
If you need assistance setting it up then I can assist with that for my normal hourly fee.
I realize that this post is a couple of weeks old, but thought I’d chime in here anyway. I don’t use UCC certs with Exchange — at all. I use single name certs, and reconfigure Exchange so that all the names are the same. When using this method, don’t create an A record or CNAME for autodiscover at all. Just set up a SRV record.
Instructions for configuring Exchange 2010/2013 are pretty much the same. Check these links for more info:
http://www.cohesivelogic.com/exchange-2010-single-name-ssl-certificates/
http://exchangeserverpro.com/avoiding-exchange-2013-server-names-ssl-certificates/
It all depends on your namespaces you have setup with Exchange.
SRV records work but not for 100% of devices. For my environment I use both the autodiscover redirect method and SRV records. SRV records are great because you don’t have the SSL problems and no additional setup is needed to use them. However there are some devices that don’t work with them properly.
Yep, I agree with that assessment. Mobile phones are a good example of that. Without autodiscover.domain.com in place, one has to manually enter a good bit of information. I’ve found multi-domain SSL certs for $20/yr. at comodosslstore. It’s the same company as thesslstore. I’ve used them before. Works great!
I’m just getting back to implementing CloudPanel in my all-Server 2012 R2 environment. Should be done today.
It all depends on your namespaces you have setup with Exchange.SRV records work but not for 100% of devices. For my environment I use both the autodiscover redirect method and SRV records. SRV records are great because you don?t have the SSL problems and no additional setup is needed to use them. However there are some devices that don?t work with them properly.
- 5 Forums
- 714 Topics
- 3,630 Posts
- 1 Online
- 254 Members