1

We're running a single domain on a single Exchange 2013 server. I'm currently trying to determine what kind of SSL cert I need.

Right now I'm unsure why I need a UC (Unified Communications) Certificate like this one.

I can understand why something like this wildcard certificate would be necessary.

Any direction would be helpful!

Improve this question
1

1 Answer 1

Reset to default
2

A UC certificate is perfectly fine. The only names you really need are the external URL you will use for OWA/Outlook Anywhere (such as mail.mycompany.com) and autodiscover.mycompany.com. If you plan on using TLS for encrypted mail transport, you will need to include the FQDN that you use on your send connector, which also could just be mail.mycompany.com.

I would recommend a wildcard certificate if you want to use one certificate for a ton of other web applications under the same domain name. You will have to set your Outlook Provider appropriately if you use a wildcard cert:

Set-OutlookProvider EXPR -CertPrincipalName 'msstd:*.mycompany.com'
Improve this answer
6
  • Thanks for the response! Right now I'm leaning towards the wildcard cert, mostly based on it costing approx 1/3 the price, are there any real technical reasons why I should go with the UC cert over the WildCard?
    – ErnieTheGeek
    Aug 5, 2013 at 21:57
  • Not sure about this in 2013, but 2010 and wildcard cert was a major pain, Outlook Anywhere didn't like wildcard certs, I had to buy a SAN cert for it to actually work, this didn't work with me: technet.microsoft.com/en-us/library/cc535023(EXCHG.80).aspx
    – Noor Khaldi
    Aug 6, 2013 at 7:55
  • Hi Noor, the issue with Outlook Anywhere is addressed by the PowerShell one-liner I provided. Ernie- I'm finding out that transport TLS won't work with a wildcard certificate. If you don't mind my asking, what provider are you using that has wildcards for 1/3 the price of a UC cert?
    – Jeremy Lyons
    Aug 6, 2013 at 14:34
  • @JeremyLyons My numbers might be slightly skewed as I'm looking at wholesale, but the links in my post are for Comodo certs where the retail "Essential WildCard" (Second Link) is listed at retail $98usd for 1 year and the UC cert (First Link) starts at retail $235usd.
    – ErnieTheGeek
    Aug 6, 2013 at 14:49
  • So you're saying the Wildcard will work fine by using the PS command you posted there?
    – ErnieTheGeek
    Aug 6, 2013 at 14:50

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.