Any specific type of SSL-cert. needed for AutoDiscover?

Question

Hi,

According to the protocol, the AutoDiscover domain located on e.g. https://autodiscover.mydomain.com/autodiscover/autodiscover.xml  needs to have an SSL-cert. installed.

Now, is there any SPECIFIC requirements associated for the TYPE of this certificate, or would any standard SSL-cert. from e.g. VeriSign do just fine?

Answer 1

Hi Southbranch,

Thank you for your question. A member of the protocol documentation team will respond to you soon.

Regards,
Vilmos Foltenyi - MSFT

Answer 2

Any trusted, (as defined by the platform you are running on), SSL certificate should work. I've had it working both with single name certs, and wildcard certs. Since I'm cheap in the SSL department I'm using GoDaddy and it works without any issues :)

There are of course requirements like "autodiscover" needing to be included as the common name since the protocol is hardwired to use this name. (The workaround if you cannot use that specific name is to use SRV records instead for the lookup.)

Answer 3

Hi Southbranch,

Did Andreas answer your question? If not, please provide additional details for your scenario and we will gladly assist you. Have you checked http://technet.microsoft.com/en-us/library/bb332063(EXCHG.80).aspx#ADAndCertificates

Regards,
Vilmos Foltenyi - MSFT

Answer 4

Thanks Andreas,

We'll go with your comment and go for a standard cert. I'll get back if any other issue should arrise.

Many thanks 

Answer 5

We have now installed and tested with a standard SSL from GlobalSign. The cert. is issued to "autodiscover.mydomain.com" and not "MyCompany Inc" and somehow this seems to be an issue with some devices.

On iPhone there is a popup saying ""Unknown puplisher"... We can get pass it be selecting various options and then get it to work, but it doesn't feel very user friendly. We have checked with our supplier and they claim SSL-cert should be issued to the domain name rather than company name (as for code signing certs).

Any comments here?

Thanks in advance

Answer 6

Hi Southbranch,

The purpose of this forum is to support the Open Specifications documentation. You can read about the Microsoft Open Specifications program here, http://www.microsoft.com/openspecifications/en/us/default.aspx
Your question may be more applicable to this forum,
http://social.technet.microsoft.com/Forums/en-US/exchangesvrclients
 
Thanks, Vilmos