Exchange 2016: Determine DNS names for certificates (Quick & Dirty)

The DNS names of the configured URLs of the virtual Exchange directories are relevant for the SSL certificate. The corresponding DNS names must be available on the certificate as SAN (Subject Alternate Name). This small script lists all configured DNS names of the Exchange 2016 servers. This allows the certificate to be requested and issued accordingly. $AllExchangeServers = Get-ExchangeServer foreach ($ExchangeServer in $AllExchangeServers) ... Read more

Exchange 2016: Configuring certificates (part 2)

This is the second part of the article series. As already announced in the first part, this article deals with the configuration. Important: Be sure to read the first part first, as this article builds directly on it. Exchange 2016 configuration The first part ended with the considerations for the URLs to be used to access Exchange. For the sake of simplicity ... Read more

Exchange 2016: Configuring certificates (part 1)

I now receive emails every day with questions about certificates and/or Outlook Anywhere. The questions about Outlook Anywhere are usually also related to the certificates. In most cases, the emails end with a sentence similar to this one: Certificates are a red rag for me! The sentence comes from a mail that I received today ... Read more

Free SAN certificates also with StartSSL

In addition to Let's Encrypt, StartSSL also offers free SAN certificates for up to 5 domains with a term of 1 year for free. The certificates are supported by all common browsers and devices. The advantage of StartSSL over Let's Encrypt is that the certificates are valid for 1 year, compared to only 3 months with Let's Encrypt. The certificates must be ... Read more

Let's Encrypt: Free certificates for Exchange Server

Update 12.01.17: This article is outdated, here is an updated version: Exchange 2016: Free certificates from Let's Encrypt The new CA "Let's Encrypt" has been in the public beta phase for a few days now. The aim of Let's Encrypt is to issue SSL certificates easily. The certificates are also free of charge. The CA will ... Read more

Exchange 2013: Create certificate request for public CA

Certificates from an Active Directory integrated certification authority can be easily requested via MMC. However, if you want to buy a certificate, you need a certificate request that can be submitted to the CA. Unfortunately, ECP offers few options for configuring the request and the subsequent certificate. The way via the Exchange Shell works much better. The command is ... Read more

Certification authority: No certificate templates were found (web request)

Today I just wanted to quickly request a certificate via certificate templates, but as it happens. The following error message: No certificate templates were found. You do not have sufficient rights to request a certificate from this certification authority, or an error occurred while accessing the Active Directory. I have a meaningful error message, but ... Read more