I've set an a multi-role Exchange server (SVR1) for my office, and now I am setting up a second multi-role server (SVR2) in a different site. Outlook Anywhere is not activated, and I don't have an edge server. Setting up the DAG is easy enough, but I'm confused about the server certificates.

Currently users access OWA using the URL https://mail.mydomain.com. So SVR1 has a certificate containing SANs for SVR1.mydomain.com and mail.mydomain.com.

But what about SVR2? What should the Certificate Principal Name, and Subject Alternative Names be?

  • If the certificate is for the edge server they should both be the same for CPN and SAN. ideally if you were using both servers as edge servers they would answer for OWA/Outlook Anywhere which would need to have the same names. – MikeAWood Feb 7 '14 at 3:05

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.