I'm not well versed on SSL certificates and how to install them in your environment, we have always outsourced this but I am interested in getting a full understanding and being capable of doing this myself.
Let me first state that we have an externally hosted website that uses the same domain name as our internal network. i.e. website is www.domain.com, internal network is domain.com.
The website already has a GEOTRUST SSL Certificate (not wildcard) and sometime ago I did contact them regarding how to combine this with the services we require covering on our network and to get a quote. I think we came to the conclusion the number of domains secured were already taken and we'd have to change to a different certificate and while our website requires a reputable provider for payments etc, the higher price we did not deem to be required for covering internal services we currently have covered by a self signed certificate, does that sound acceptable?
We want to get rid of that unsafe/proceed warning whenever using OWA/RDS Portal externally, and there is also a certificate warning every time a user connects to Outlook or a Server when connected by VPN.
We do multiple bt infinity lines with multiple static IPs for failover i.e. mail.domain.com/owa, mail2.domain.com/owa
So can we just purchase a wildcard SSL certificate to avoid having to declare all of the hostnames?
I have been looking at 123 reg
https://www.123-reg.co.uk/ssl-certificates/wildcard-ssl-certificates.shtml
There are 3 Wildcard Packages at £80, £175, £225, would you deem any of these acceptable for our requirements? any other recommendations
Could you please list all of the places that this certificate would to be installed/configured within our environment? Exchange? IIS? (all servers with IIS installed?)
Exchange 2010 is on its own server and so is the RD Web Environment.
Can you see any potential pitfalls I need to be aware of?
Thanks in advance