OWA over SSL problem

[Chris Ciapala]

I've been set up OWA on virtual IIS server (with it's own IP) and now I'm trying to secure it with SSL. All seems to work fine, however there is security alert when reaching OWA:
"The name on the security certificate is inwalid or does not match the name of the site"
Which name I should use in certifivate name, real server name or virtual server name?
I'm redirecting requests from http://mail to https://mail/exchange via http refresh, maybe this is the problem? Or what other mistake I've done here? Exchange 5.5 SP4, IIS 5.0 w2k SP3, IIS and Exchange on different servers.
Thanks,
Chris

[Rune J. Winje]

Hi,
you can take a look at this document:
"5-minute Security Advisor - Configuring Outlook Web Access"
http://www.microsoft.com/technet/columns/security/5min/5min-301.asp

This has a link to the document:
"HOW TO: Enable SSL for All Customers Who Interact with Your Web Site in Internet Information Services"
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q298805&sd=tech

Here it states you should in effect use the fully qualified dns name of your computer:
"Common name NOTE: The common name is usually comprised of your host computer name and the domain to which it belongs, such as xyz.com. In this case, the computer is part of the .com domain, and is named XYZ. This may be the root server for your corporate domain, or simply a Web site."

Also
http://support.microsoft.com/default.aspx?scid=KB;EN-US;q277908&
may be of interest in cluster environments.

Hope this helps.



Cheers,
Rune