We have an existing internal domain with extension .internal
The .internal extension has been in-place for years and the AD has over 90 users with a linked to Exchange 2007 email accounts.
We now have a need to use signed SSL certificates, these need to be trusted by a third party. We are having difficulty locating a CA who will certify the .internal domain which is to some extent fair enough.
As I see it we have two choices:
One create an internal CA and persuade the 3rd party to add this to their own trusted root store (unlikely)
Two migrate the domain to .local. Does anyone have any experience of this, I know there is a procedure to rename a domain on AD but this does not seem to support Exchange.