Question Locked

certificate for exchange

0 helpful
3 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hello, I run SBS2003 w exchange for a very small company. right now, i cant set up outlook to get email out of the network because the certificate is not from a trusted issuer. Outlook works in the network just fine, just not out.

With that i just dont know anything about certificates. I dont want to buy anything i dont need, at the same time, make sure I get whats expected for outllok to accept the proxy connector.

Please help. thank you!

3 replies

by maniacman

There is something known as a "trusted root" certificate when it comes to SSL, in which all web browsers, such as IE, Firefox, Netscape, Opera, etc will trust because it's from a trusted and verified source, such as Verisign and Thawte just to name a few. If you mint your own internal X.509 certs using an Enterprise CA, those certs will be trusted within your forest, but anyone outside of your AD system will not trust the cert, thus making it a suspicious and non-trusted cert unless you export your certificate and they import it as a trusted root cert into their system. If you truly want to SSL secure your messages, invest in a true root cert from a tusted 3rd party provider like Verisign or Thawte. I understand you don't want to spend the money, but it's just good business practice to use 3rd party trusted root and avoid having to exchange your private minted cert with every customer out there.

This discussion is closed to new replies.