Securing an Exchange 2007 Client Access Server Using a 3rd Party SAN Certificate
Exchange Server 2007 also introduces a new Exchange web service called the Autodiscover service. The autodiscover service is used to configure Outlook 2007 clients. More specifically, the Autodiscover service is used by Outlook 2007 client features such as the Availability service (free/busy), Auto Account Setup (automatic profile creation), Out of Office (OOF), Offline Address Book (OAB), and Unified Messaging (UM). This means that in order for these features to work correctly, the Autodiscover service must be properly configured. By default all web-based Exchange 2007 services are secured using the self-signed SSL certificate that is created during setup. This paper shows how to properly secure an Exchange 2007 Client Access Server (CAS) using a 3rd party Subject Alternative Name (SAN) certificate.