SSL CSR and OWA

We have one exchange 2k3 server, we want to enable SSL on OWA, we want to
replace our self-issued certificate with a third party certificate..

I need a Certificate Signing Request to get that third party certificate.

when I look at the IIS.msc default site/properties/directory security tab it
sows we are using a self-issued cert and there is no option for adding a
second. I can delete or edit this one.

I am at a standstill - do I delete our self-isued cert or can I get the CSR
by editing the existing one?

Thanks so much in advance!!

RE: SSL CSR and OWA

When you are at the Directory Security tab within the Site Properties, there
should be a Server Certificate... button which will launch the IIS
Certificate Wizard. Within the wizard, you will need to either renew the
current cert (and choose the option to prepare the request now but send it
later), or remove the current certificate and then request a new one.

"totoro" wrote:

> We have one exchange 2k3 server, we want to enable SSL on OWA, we want to
> replace our self-issued certificate with a third party certificate..
>
> I need a Certificate Signing Request to get that third party certificate.
>
> when I look at the IIS.msc default site/properties/directory security tab it
> sows we are using a self-issued cert and there is no option for adding a
> second. I can delete or edit this one.
>
> I am at a standstill - do I delete our self-isued cert or can I get the CSR
> by editing the existing one?
>
> Thanks so much in advance!!
>

RE: SSL CSR and OWA

In your experience how disruptive is this process?

Once I begin the process does the existing certificate stay active until the
new certificate supercedes it, or could I be looking at minutes or hours
without a certifiate at all?

If that occurs what sort or communications problems will I encounter? Should
I plan to do this on a weekend/holiday or can it be done during regular
business?

Thank you so much for your reply!!

"JDMnAR" wrote:

> When you are at the Directory Security tab within the Site Properties, there
> should be a Server Certificate... button which will launch the IIS
> Certificate Wizard. Within the wizard, you will need to either renew the
> current cert (and choose the option to prepare the request now but send it
> later), or remove the current certificate and then request a new one.
>
> "totoro" wrote:
>
> > We have one exchange 2k3 server, we want to enable SSL on OWA, we want to
> > replace our self-issued certificate with a third party certificate..
> >
> > I need a Certificate Signing Request to get that third party certificate.
> >
> > when I look at the IIS.msc default site/properties/directory security tab it
> > sows we are using a self-issued cert and there is no option for adding a
> > second. I can delete or edit this one.
> >
> > I am at a standstill - do I delete our self-isued cert or can I get the CSR
> > by editing the existing one?
> >
> > Thanks so much in advance!!
> >

RE: SSL CSR and OWA

If you process it as a renewal, the current certificate will remain in force
until you receive and apply the new certificate.

"totoro" wrote:

> In your experience how disruptive is this process?
>
> Once I begin the process does the existing certificate stay active until the
> new certificate supercedes it, or could I be looking at minutes or hours
> without a certifiate at all?
>
> If that occurs what sort or communications problems will I encounter? Should
> I plan to do this on a weekend/holiday or can it be done during regular
> business?
>
> Thank you so much for your reply!!
>
> "JDMnAR" wrote:
>
> > When you are at the Directory Security tab within the Site Properties, there
> > should be a Server Certificate... button which will launch the IIS
> > Certificate Wizard. Within the wizard, you will need to either renew the
> > current cert (and choose the option to prepare the request now but send it
> > later), or remove the current certificate and then request a new one.
> >
> > "totoro" wrote:
> >
> > > We have one exchange 2k3 server, we want to enable SSL on OWA, we want to
> > > replace our self-issued certificate with a third party certificate..
> > >
> > > I need a Certificate Signing Request to get that third party certificate.
> > >
> > > when I look at the IIS.msc default site/properties/directory security tab it
> > > sows we are using a self-issued cert and there is no option for adding a
> > > second. I can delete or edit this one.
> > >
> > > I am at a standstill - do I delete our self-isued cert or can I get the CSR
> > > by editing the existing one?
> > >
> > > Thanks so much in advance!!
> > >