how to use a self signed certificate in exchange 2010.pdf

Upload: khushpreet1022

Post on 04-Apr-2018

228 views

Category:

Documents


0 download

TRANSCRIPT

  • 7/29/2019 How to Use a Self Signed Certificate in Exchange 2010.pdf

    1/29

    How to Use a Self Signed Certificate in

    Exchange 2010

    We can use a self signed certificated for Exchange 2010 ,

    Now will learn how to do it.

    Something which you need to know is , Using a self signed certificate you need to install the certificates on every

    machine you use and Mobile devices other wise you will end up in a certificate error in the IE

    So thats why people prefer going for a 3rd party certificate to overcome it.

    Will Learn using a Self Signed Certificate , for this to be used Externally you need to have a CNAME record in your

    public DNS pointing to your Public IP NAT to your CAS

    First we will learn how to Export a Certificate request file from Exchange 2010 ,

    Step 1:

    Type a Friendly Name :

    http://careexchange.in/wp-content/uploads/2012/02/image21.pnghttp://careexchange.in/wp-content/uploads/2012/02/image21.pnghttps://twitter.com/share
  • 7/29/2019 How to Use a Self Signed Certificate in Exchange 2010.pdf

    2/29

    Wild Card is used for Very Big Environment .For Example : *.Domain.com

    http://careexchange.in/wp-content/uploads/2012/02/image22.pnghttp://careexchange.in/wp-content/uploads/2012/02/image22.png
  • 7/29/2019 How to Use a Self Signed Certificate in Exchange 2010.pdf

    3/29

    Step 2:

    Assign the required Services for your Exchange , Give a Tick Mark

    http://careexchange.in/wp-content/uploads/2012/02/image23.pnghttp://careexchange.in/wp-content/uploads/2012/02/image23.pnghttp://careexchange.in/wp-content/uploads/2012/02/image23.pnghttp://careexchange.in/wp-content/uploads/2012/02/image23.pnghttp://careexchange.in/wp-content/uploads/2012/02/image23.png
  • 7/29/2019 How to Use a Self Signed Certificate in Exchange 2010.pdf

    4/29

    You will opt for it if you are planning for Coexistence in OWA in Exchange 2003 and Exchange 2010

    Step 3:

    You will see the collection for URLs

    http://careexchange.in/wp-content/uploads/2012/02/image25.pnghttp://careexchange.in/wp-content/uploads/2012/02/image25.pnghttp://careexchange.in/wp-content/uploads/2012/02/image24.pnghttp://careexchange.in/wp-content/uploads/2012/02/image24.pnghttp://careexchange.in/wp-content/uploads/2012/02/image25.png
  • 7/29/2019 How to Use a Self Signed Certificate in Exchange 2010.pdf

    5/29

    Step 4:

    Fill out the Form And set the location for the Cert Request file

    http://careexchange.in/wp-content/uploads/2012/02/image26.pnghttp://careexchange.in/wp-content/uploads/2012/02/image26.png
  • 7/29/2019 How to Use a Self Signed Certificate in Exchange 2010.pdf

    6/29

    http://careexchange.in/wp-content/uploads/2012/02/image27.pnghttp://careexchange.in/wp-content/uploads/2012/02/image27.png
  • 7/29/2019 How to Use a Self Signed Certificate in Exchange 2010.pdf

    7/29

    Step 5:

    Your request file would look like this

    Open it via Notepad , because we need this content to generate a Certificate

    http://careexchange.in/wp-content/uploads/2012/02/image29.pnghttp://careexchange.in/wp-content/uploads/2012/02/image29.pnghttp://careexchange.in/wp-content/uploads/2012/02/image28.pnghttp://careexchange.in/wp-content/uploads/2012/02/image28.pnghttp://careexchange.in/wp-content/uploads/2012/02/image29.png
  • 7/29/2019 How to Use a Self Signed Certificate in Exchange 2010.pdf

    8/29

    Step 6:

    You need to have this role installed to have a Certificate Authority , It can be DC or Exchange it self

    I have done this in the Exchange itself (No Harm)

    http://careexchange.in/wp-content/uploads/2012/02/image30.pnghttp://careexchange.in/wp-content/uploads/2012/02/image30.pnghttp://careexchange.in/wp-content/uploads/2012/02/image30.pnghttp://careexchange.in/wp-content/uploads/2012/02/image30.png
  • 7/29/2019 How to Use a Self Signed Certificate in Exchange 2010.pdf

    9/29

    Step 7:

    Choose : Certification authority , Certification Authority Web Enrollment

    http://careexchange.in/wp-content/uploads/2012/02/image31.pnghttp://careexchange.in/wp-content/uploads/2012/02/image31.png
  • 7/29/2019 How to Use a Self Signed Certificate in Exchange 2010.pdf

    10/29

    Step 8:

    Choose Enterprise

    http://careexchange.in/wp-content/uploads/2012/02/image32.pnghttp://careexchange.in/wp-content/uploads/2012/02/image32.png
  • 7/29/2019 How to Use a Self Signed Certificate in Exchange 2010.pdf

    11/29

    Step 9:

    Choose Root CA

    http://careexchange.in/wp-content/uploads/2012/02/image33.pnghttp://careexchange.in/wp-content/uploads/2012/02/image33.png
  • 7/29/2019 How to Use a Self Signed Certificate in Exchange 2010.pdf

    12/29

    Step 10:

    Create a new Private key

    http://careexchange.in/wp-content/uploads/2012/02/image34.pnghttp://careexchange.in/wp-content/uploads/2012/02/image34.png
  • 7/29/2019 How to Use a Self Signed Certificate in Exchange 2010.pdf

    13/29

    Step 11:

    Have this Default with 2048 key Character length

    http://careexchange.in/wp-content/uploads/2012/02/image35.pnghttp://careexchange.in/wp-content/uploads/2012/02/image35.png
  • 7/29/2019 How to Use a Self Signed Certificate in Exchange 2010.pdf

    14/29

    Step 12:

    Click Next

    http://careexchange.in/wp-content/uploads/2012/02/image36.pnghttp://careexchange.in/wp-content/uploads/2012/02/image36.png
  • 7/29/2019 How to Use a Self Signed Certificate in Exchange 2010.pdf

    15/29

    Step 13:

    By Default Certificate is valid for 5 years , Dont make any changes on it , Click next

    http://careexchange.in/wp-content/uploads/2012/02/image37.pnghttp://careexchange.in/wp-content/uploads/2012/02/image37.png
  • 7/29/2019 How to Use a Self Signed Certificate in Exchange 2010.pdf

    16/29

    Step 14:

    http://careexchange.in/wp-content/uploads/2012/02/image38.pnghttp://careexchange.in/wp-content/uploads/2012/02/image38.png
  • 7/29/2019 How to Use a Self Signed Certificate in Exchange 2010.pdf

    17/29

    Step 15:

    Now if you Open IIS manager , you will see CertSrv a Virtual Directory Created ,

    Use the right side column Browse *.443(https)

    Step 16:

    http://careexchange.in/wp-content/uploads/2012/02/image40.pnghttp://careexchange.in/wp-content/uploads/2012/02/image40.pnghttp://careexchange.in/wp-content/uploads/2012/02/image39.pnghttp://careexchange.in/wp-content/uploads/2012/02/image39.png
  • 7/29/2019 How to Use a Self Signed Certificate in Exchange 2010.pdf

    18/29

    You would see a page like this , Choose Request a Certificate

    Step 17:

    Click on Advanced Certificate Request

    Step 18:

    Choose the Second one

    Submit a certificate request by using a base-64-Encoded CMC

    http://careexchange.in/wp-content/uploads/2012/02/image42.pnghttp://careexchange.in/wp-content/uploads/2012/02/image42.pnghttp://careexchange.in/wp-content/uploads/2012/02/image41.pnghttp://careexchange.in/wp-content/uploads/2012/02/image41.png
  • 7/29/2019 How to Use a Self Signed Certificate in Exchange 2010.pdf

    19/29

    Step 19:

    Now Copy the Note pad -

    Choose Template : WebServer

    http://careexchange.in/wp-content/uploads/2012/02/image43.pnghttp://careexchange.in/wp-content/uploads/2012/02/image43.png
  • 7/29/2019 How to Use a Self Signed Certificate in Exchange 2010.pdf

    20/29

    Step 20:

    Choose Base 64 encoded

    Step 21:

    Save the Certificate

    http://careexchange.in/wp-content/uploads/2012/02/image45.pnghttp://careexchange.in/wp-content/uploads/2012/02/image45.pnghttp://careexchange.in/wp-content/uploads/2012/02/image44.pnghttp://careexchange.in/wp-content/uploads/2012/02/image44.png
  • 7/29/2019 How to Use a Self Signed Certificate in Exchange 2010.pdf

    21/29

    Step 22:

    Now go to your EMC

    Server Configuration Complete Pending request

    Chose the Certificate :

    http://careexchange.in/wp-content/uploads/2012/02/image46.pnghttp://careexchange.in/wp-content/uploads/2012/02/image48.pnghttp://careexchange.in/wp-content/uploads/2012/02/image48.pnghttp://careexchange.in/wp-content/uploads/2012/02/image47.pnghttp://careexchange.in/wp-content/uploads/2012/02/image47.pnghttp://careexchange.in/wp-content/uploads/2012/02/image46.pnghttp://careexchange.in/wp-content/uploads/2012/02/image46.pnghttp://careexchange.in/wp-content/uploads/2012/02/image46.pnghttp://careexchange.in/wp-content/uploads/2012/02/image46.png
  • 7/29/2019 How to Use a Self Signed Certificate in Exchange 2010.pdf

    22/29

    Step 23:

    Now Assign Services to the Certificate

    http://careexchange.in/wp-content/uploads/2012/02/image49.pnghttp://careexchange.in/wp-content/uploads/2012/02/image49.png
  • 7/29/2019 How to Use a Self Signed Certificate in Exchange 2010.pdf

    23/29

    http://careexchange.in/wp-content/uploads/2012/02/image50.pnghttp://careexchange.in/wp-content/uploads/2012/02/image50.png
  • 7/29/2019 How to Use a Self Signed Certificate in Exchange 2010.pdf

    24/29

    Now the Server Part is ready

    Step 24:

    Now will learn how to install the Certificate in the Client End

    Double Click on the Certificate

    Click Install Certificate Click Next

    http://careexchange.in/wp-content/uploads/2012/02/image51.pnghttp://careexchange.in/wp-content/uploads/2012/02/image51.png
  • 7/29/2019 How to Use a Self Signed Certificate in Exchange 2010.pdf

    25/29

    Choose Personal

    http://careexchange.in/wp-content/uploads/2012/02/image52.pnghttp://careexchange.in/wp-content/uploads/2012/02/image52.png
  • 7/29/2019 How to Use a Self Signed Certificate in Exchange 2010.pdf

    26/29

    Click Next And Import will be Successful

    Now Do the Same Process

    Double Click on the Certificate

    Click Install Certificate Click Next Choose Trusted Root Certification Authorities

    http://careexchange.in/wp-content/uploads/2012/02/image53.pnghttp://careexchange.in/wp-content/uploads/2012/02/image53.pnghttp://careexchange.in/wp-content/uploads/2012/02/image53.pnghttp://careexchange.in/wp-content/uploads/2012/02/image53.png
  • 7/29/2019 How to Use a Self Signed Certificate in Exchange 2010.pdf

    27/29

    Double Click on the Certificate

    Click Install Certificate Click Next Choose Intermediate Certification Authorities

    http://careexchange.in/wp-content/uploads/2012/02/image54.pnghttp://careexchange.in/wp-content/uploads/2012/02/image54.pnghttp://careexchange.in/wp-content/uploads/2012/02/image54.pnghttp://careexchange.in/wp-content/uploads/2012/02/image54.png
  • 7/29/2019 How to Use a Self Signed Certificate in Exchange 2010.pdf

    28/29

    Step 25:

    Before

    After installing the Certificate in the Client

    http://careexchange.in/wp-content/uploads/2012/02/image55.pnghttp://careexchange.in/wp-content/uploads/2012/02/image56.pnghttp://careexchange.in/wp-content/uploads/2012/02/image56.pnghttp://careexchange.in/wp-content/uploads/2012/02/image55.pnghttp://careexchange.in/wp-content/uploads/2012/02/image55.pnghttp://careexchange.in/wp-content/uploads/2012/02/image55.png
  • 7/29/2019 How to Use a Self Signed Certificate in Exchange 2010.pdf

    29/29

    Great !!

    Now you learn how to use a Self Signed Certificate in Exchange 2010

    Regards

    Satheshwaran Manoharan

    http://careexchange.in/wp-content/uploads/2012/02/image57.pnghttp://careexchange.in/wp-content/uploads/2012/02/image57.png