<?xml version="1.0" encoding="UTF-8"?><!-- generator="wordpress/2.2.2" -->
<rss version="2.0" 
	xmlns:content="http://purl.org/rss/1.0/modules/content/">
<channel>
	<title>Comments on: Communicator 2007 Certificate Error</title>
	<link>http://www.leedesmond.com/weblog/?p=317</link>
	<description>security, unified communications, PowerShell, virtualization // snowboarding, scuba diving</description>
	<pubDate>Wed, 08 Sep 2010 00:45:12 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.2.2</generator>

	<item>
		<title>By: webmaster</title>
		<link>http://www.leedesmond.com/weblog/?p=317#comment-271531</link>
		<author>webmaster</author>
		<pubDate>Mon, 17 Aug 2009 13:16:35 +0000</pubDate>
		<guid>http://www.leedesmond.com/weblog/?p=317#comment-271531</guid>
		<description>iconoclast88,

Sorry for the late reply.

To make life easier, you should consider procuring Unified Communications certificates that are specifically certified (or designed) to work with Exchange 2007/2010 or OCS 2007 R2. As you have discovered, Subject Alternate Name (SAN) is one of those tricky fields that must be properly setup in addition to the normal Subject Name (CN).

How did you configure your digital certificate when you purchased it from your provider (godaddy)? The process should not be very different from a certificate request step (using the built-in OCS Wizard) if you have your own internal CA, such as Windows Server 2003 or 2008.</description>
		<content:encoded><![CDATA[<p>iconoclast88,</p>
<p>Sorry for the late reply.</p>
<p>To make life easier, you should consider procuring Unified Communications certificates that are specifically certified (or designed) to work with Exchange 2007/2010 or OCS 2007 R2. As you have discovered, Subject Alternate Name (SAN) is one of those tricky fields that must be properly setup in addition to the normal Subject Name (CN).</p>
<p>How did you configure your digital certificate when you purchased it from your provider (godaddy)? The process should not be very different from a certificate request step (using the built-in OCS Wizard) if you have your own internal CA, such as Windows Server 2003 or 2008.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: iconoclast88</title>
		<link>http://www.leedesmond.com/weblog/?p=317#comment-250281</link>
		<author>iconoclast88</author>
		<pubDate>Thu, 02 Jul 2009 19:06:40 +0000</pubDate>
		<guid>http://www.leedesmond.com/weblog/?p=317#comment-250281</guid>
		<description>Lee,

I've done this, and still I get the same message. I'm beginning to think something's wrong with my cert. I'm,using a public trusted CA, godaddy normal, simple cert for internal OCS 2007 r2. I only have 1 enterprise server in my pool.

one sip. domain.com
domain is same internally and externally - domain.com

godaddy cert is for the fqdn of the pool.

The only thing that makes me think the cert won't work is that during ocs cert setup it asks for a subject alternate name for the SIP. Can a normal cert do this? I don't have a UCC for this, but i thought i didn't need one for the internal. 

I do not have an internal CA setup.

Josh</description>
		<content:encoded><![CDATA[<p>Lee,</p>
<p>I&#8217;ve done this, and still I get the same message. I&#8217;m beginning to think something&#8217;s wrong with my cert. I&#8217;m,using a public trusted CA, godaddy normal, simple cert for internal OCS 2007 r2. I only have 1 enterprise server in my pool.</p>
<p>one sip. domain.com<br />
domain is same internally and externally - domain.com</p>
<p>godaddy cert is for the fqdn of the pool.</p>
<p>The only thing that makes me think the cert won&#8217;t work is that during ocs cert setup it asks for a subject alternate name for the SIP. Can a normal cert do this? I don&#8217;t have a UCC for this, but i thought i didn&#8217;t need one for the internal. </p>
<p>I do not have an internal CA setup.</p>
<p>Josh</p>
]]></content:encoded>
	</item>
</channel>
</rss>
                
