Microsoft Exchange server: which SSL to use? What about autodiscover. subdomain?

Symptom: internal access is working properly, but accessing with Outlook from remote locations is showing an error that autodiscover.yourdomain.com is not part of the SSL certificate.

Solution:

Don't use a single domain certificate, but a wildcard or mutli-domain certificate that not only includes "mail.company.com" but also "autodiscover.company.com".

If you have already ordered a single domain certificate, you can use the 14 days money-back-guarantee and replace it with the proper one.


Multi-Domain certificate:

As with a single domain certificate, create the CSR for "mail.company.com". When placing the CSR inside "My InterSSL", add "autodiscover.company.com" as a SAN Slot.


Wildcard certificate:
Simply create a CSR for *.company.com.  The autodiscover. domain will automatically be covered by the wildcard certificate.



White Paper: Understanding the Exchange 2010 Autodiscover Service

https://technet.microsoft.com/en-us/library/jj591328(v=exchg.141).aspx

Was this answer helpful?

 Print this Article

Also Read

How long does it take until HTTP based authentication is verified?

Typically HTTP-based authentication will be done within a couple of minutes. If you think the...

SSL request and installation under Synology DiskStation NAS

If you want to obtain a SSL certificate for your Synology diskstation, we recommend to NOT use...

Multidomain SAN Upgrade: is it possible to purchase additional SAN slots later?

Yes, it is possible to increase the SAN slot count for an existing multi-domain SSL certificate....

Google Webmaster Tools Meldung: "SSL-/TLS-Zertifikat enthält nicht den Domainnamen" oder "selbst-signiertes Zertifikat"

Beispiel Google Webmaster Tools Meldung:"Google hat festgestellt, dass im momentan auf...

ErrorCode:-9009|Message:Vendor returns error:the value of the 'dcvemailaddresses' argument is invalid

This error may occur when you are trying to generate a SSL certificate for internal domain names...