[jaxisland]

I have an Exchange server, Server2 and a DC with CA on it, Server1. I want OWA to require certificates but when I go to http://Server1/certsrv it says it page cannot be found. I checked IIS and it says its on there. How can I get my CA to issue certificates for my OWA.

thanks

[Advertisements]

As more detail, I have the setup of the OWA itself just fine. But to access my CA you use http://CAservername/certsrv

When I do that, it says page not found. Im confused

[jaxisland]

As more detail, I have the setup of the OWA itself just fine. But to access my CA you use http://CAservername/certsrv

When I do that, it says page not found. Im confused

[jaxisland]

I made some progress. On my CA I went into the IIS Manager, and under Web Service Extensions I changed Active Server Pages to allowed from prohibited, now I can get to servername/certsrv.

My next issue is when I try to set cersrv for SSL I get an IE error that says cannot display the page. Thats my next problem.

[jaxisland]

Fixed that issue by adding a server certificate to the default web site on the server that has the CA.

now the CA and mail server have server certificates. using all ssl I can request and issue certifcates fine. Now when I go to mailserver/exchange I use admin credentials to login and the page flashes and says they are incorrect.

[dsenette]

....are you connecting to the owa site via SSL? i.e. https? i've got no experience with what you're doing...but i know when you're issuing certs and requiring such things that you've got to access the page via SSL

[jaxisland]

Yeah, the sites use https which they are suppose to. Now I just need to figure out why my credentials arent working on the website.

[dsenette]

if you switch it back to the way it was (non certed) does it work again?

[jaxisland]

With or without cert it wont let me login.

[jaxisland]

Ok, I have the solution. After everything above is done, then I went into the IIS Manager on the mail server, went to Default Web Site -> Right clicked on Exchange and went to Properties. Clicked Directory Security tab, clicked edit under authentication and access control, selected basic authentication with the domain and realm being my domain name. Now everything works as it should.