UC Certs

OK, quick rant. I have explained why you need SAN certs for our exchange 2007 / 2010 / SBS 2008 servers probably 3 times to each member of my company. We have bought 4 SAN certs, three for clients and one for us.

So my boss calls and says "I'm running so and so command to make an SSL cert for client X and I need to know if we use MS crypto graphic keys or DH..." Its an SBS 2008 server

No, he wasn't joking.

I told him what he needed to do.

5 minutes later he calls back, he has created the cert request in IIS. INCORRECT! Do it again, through the shell this time.

Hell, there are hand holding directions right in DIGICERT. They make it almost idiot proof.

Rant over.

Find more posts tagged with

Save $250 on 2025 certification boot camps from Infosec!

Book now with code EOY2025

Button

Comments

Claymoore

At least in 2010 there is now a GUI wizard to walk you through creating the request.

But the DigiCert CSR Tool makes it very easy, provided you can cut and paste the command generated into the EMS. IMO, if you can't do that you shouldn't have any rights to admin Exchange.

it_consultant

Claymoore wrote: »

At least in 2010 there is now a GUI wizard to walk you through creating the request.

But the DigiCert CSR Tool makes it very easy, provided you can cut and paste the command generated into the EMS. IMO, if you can't do that you shouldn't have any rights to admin Exchange.

I know, it saves me from when i do it in Ex 2007 and forget to pipe the apply cert command to the ex services. Nothing like typing the cert thumbprint out in powershell.

Bl8ckr0uter

I feel like a noob because I just had to do this lol.