<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="http://blogs.technet.com/utility/FeedStylesheets/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/"><channel><title>Johann's Unified Communications : certificates</title><link>http://blogs.technet.com/jkruse/archive/tags/certificates/default.aspx</link><description>Tags: certificates</description><dc:language>en-US</dc:language><generator>CommunityServer 2.1 SP1 (Build: 61025.2)</generator><item><title>UC Certificate Partners for Exchange and OCS 2007</title><link>http://blogs.technet.com/jkruse/archive/2008/02/08/uc-certificate-partners-for-exchange-and-ocs-2007.aspx</link><pubDate>Fri, 08 Feb 2008 02:32:04 GMT</pubDate><guid isPermaLink="false">d5e57398-b9ef-4490-9955-07cbb4e4a80d:2847251</guid><dc:creator>jkruse</dc:creator><slash:comments>1</slash:comments><comments>http://blogs.technet.com/jkruse/comments/2847251.aspx</comments><wfw:commentRss>http://blogs.technet.com/jkruse/commentrss.aspx?PostID=2847251</wfw:commentRss><wfw:comment>http://blogs.technet.com/jkruse/rsscomments.aspx?PostID=2847251</wfw:comment><description>&lt;p&gt;Exchange 2007 and Office Communications Server 2007 have strict requirements for external/public certificates - specifically the use of Subject Alternative Name (SAN) certificates, aka Unified Communications Certificates.&lt;/p&gt; &lt;p&gt;We have a KB article (kb929395) which lists some of the providers of these UC certs.&lt;/p&gt; &lt;blockquote&gt; &lt;h4&gt;INTRODUCTION&lt;/h4&gt; &lt;p&gt;Microsoft works with public X.509 certification authorities (CAs) to make sure that Microsoft Exchange Server customers can obtain the certificates that they require in order to use Microsoft Exchange Server 2007 for the Domain Security feature to enable secure client access from the Internet. &lt;p&gt;Microsoft also works with CAs in order to make sure that Microsoft Office Communications Server 2007 customers can obtain certificates that they require for Communications Server 2007 servers.&lt;/p&gt;&lt;/blockquote&gt; &lt;blockquote&gt; &lt;p&gt;&lt;a title="http://support.microsoft.com/kb/929395" href="http://support.microsoft.com/kb/929395"&gt;&lt;strong&gt;http://support.microsoft.com/kb/929395&lt;/strong&gt;&lt;/a&gt;&lt;/p&gt;&lt;/blockquote&gt;&lt;span class="sbmLink"&gt; &lt;table cellspacing="1" cellpadding="1"&gt; &lt;tbody&gt; &lt;tr&gt; &lt;td class="sbmText"&gt;Share this post : &lt;/td&gt; &lt;td class="sbmDim" onmouseover="mOvr(this)" onmouseout="mOut(this)"&gt;&lt;a class="sbmDim" onmouseover="mOvr(this)" title="Post it to backflip" onmouseout="mOut(this)" href="http://www.backflip.com/add_page_pop.ihtml?url=http://blogs.technet.com/jkruse/archive/2008/02/08/uc-certificate-partners-for-exchange-and-ocs-2007.aspx&amp;amp;title=UC Certificate Partners for Exchange and OCS 2007" target="_blank"&gt;&lt;img src="http://blogs.msdn.com/blogfiles/rahulso/WindowsLiveWriter/IconsfordifferentSocialBookmarkingSites_B387/backflip4.png" border="0"&gt;&lt;/a&gt;  &lt;td class="sbmDim" onmouseover="mOvr(this)" onmouseout="mOut(this)"&gt;&lt;a class="sbmDim" onmouseover="mOvr(this)" title="Post it to blinkbits!" onmouseout="mOut(this)" href="http://www.blinkbits.com/bookmarklets/save.php?v=1&amp;amp;source_url=http://blogs.technet.com/jkruse/archive/2008/02/08/uc-certificate-partners-for-exchange-and-ocs-2007.aspx&amp;amp;title=UC Certificate Partners for Exchange and OCS 2007" target="_blank"&gt;&lt;img src="http://blogs.msdn.com/blogfiles/rahulso/WindowsLiveWriter/IconsfordifferentSocialBookmarkingSites_B387/blinkbit4.png" border="0"&gt;&lt;/a&gt;  &lt;td class="sbmDim" onmouseover="mOvr(this)" onmouseout="mOut(this)"&gt;&lt;a class="sbmDim" onmouseover="mOvr(this)" title="Post it to blogmemes" onmouseout="mOut(this)" href="http://www.blogmemes.net/post.php?url=http://blogs.technet.com/jkruse/archive/2008/02/08/uc-certificate-partners-for-exchange-and-ocs-2007.aspx&amp;amp;title=UC Certificate Partners for Exchange and OCS 2007" target="_blank"&gt;&lt;img src="http://blogs.msdn.com/blogfiles/rahulso/WindowsLiveWriter/IconsfordifferentSocialBookmarkingSites_B387/blogmemes4.png" border="0"&gt;&lt;/a&gt;  &lt;td class="sbmDim" onmouseover="mOvr(this)" onmouseout="mOut(this)"&gt;&lt;a class="sbmDim" onmouseover="mOvr(this)" title="Post it to buddymark" onmouseout="mOut(this)" href="http://buddymarks.com/s_add_bookmark.php?bookmark_url=http://blogs.technet.com/jkruse/archive/2008/02/08/uc-certificate-partners-for-exchange-and-ocs-2007.aspx&amp;amp;bookmark_title=UC Certificate Partners for Exchange and OCS 2007" target="_blank"&gt;&lt;img src="http://blogs.msdn.com/blogfiles/rahulso/WindowsLiveWriter/IconsfordifferentSocialBookmarkingSites_B387/buddymar4.png" border="0"&gt;&lt;/a&gt;  &lt;td class="sbmDim" onmouseover="mOvr(this)" onmouseout="mOut(this)"&gt;&lt;a class="sbmDim" onmouseover="mOvr(this)" title="Post it to complore" onmouseout="mOut(this)" href="http://complore.com?q=node/add/flexinode-5&amp;amp;url=http://blogs.technet.com/jkruse/archive/2008/02/08/uc-certificate-partners-for-exchange-and-ocs-2007.aspx&amp;amp;title=UC Certificate Partners for Exchange and OCS 2007" target="_blank"&gt;&lt;img src="http://blogs.msdn.com/blogfiles/rahulso/WindowsLiveWriter/IconsfordifferentSocialBookmarkingSites_B387/complore4.png" border="0"&gt;&lt;/a&gt;  &lt;td class="sbmDim" onmouseover="mOvr(this)" onmouseout="mOut(this)"&gt;&lt;a class="sbmDim" onmouseover="mOvr(this)" title="Post it to del.icio.us" onmouseout="mOut(this)" href="http://del.icio.us/post?url=http://blogs.technet.com/jkruse/archive/2008/02/08/uc-certificate-partners-for-exchange-and-ocs-2007.aspx&amp;amp;;title=UC Certificate Partners for Exchange and OCS 2007" target="_blank"&gt;&lt;img src="http://blogs.msdn.com/blogfiles/rahulso/WindowsLiveWriter/IconsfordifferentSocialBookmarkingSites_B387/deliciou4.png" border="0"&gt;&lt;/a&gt;  &lt;td class="sbmDim" onmouseover="mOvr(this)" onmouseout="mOut(this)"&gt;&lt;a class="sbmDim" onmouseover="mOvr(this)" title="Post it to del.iri.ous!" onmouseout="mOut(this)" href="http://de.lirio.us/bookmarks/sbmtool?action=add&amp;amp;address=http://blogs.technet.com/jkruse/archive/2008/02/08/uc-certificate-partners-for-exchange-and-ocs-2007.aspx&amp;amp;title=UC Certificate Partners for Exchange and OCS 2007" target="_blank"&gt;&lt;img src="http://blogs.msdn.com/blogfiles/rahulso/WindowsLiveWriter/IconsfordifferentSocialBookmarkingSites_B387/deliriou4.png" border="0"&gt;&lt;/a&gt;  &lt;td class="sbmDim" onmouseover="mOvr(this)" onmouseout="mOut(this)"&gt;&lt;a class="sbmDim" onmouseover="mOvr(this)" title="Post it to digg" onmouseout="mOut(this)" href="http://digg.com/submit?phase=2&amp;amp;url=http://blogs.technet.com/jkruse/archive/2008/02/08/uc-certificate-partners-for-exchange-and-ocs-2007.aspx&amp;amp;title=UC Certificate Partners for Exchange and OCS 2007" target="_blank"&gt;&lt;img src="http://blogs.msdn.com/blogfiles/rahulso/WindowsLiveWriter/IconsfordifferentSocialBookmarkingSites_B387/digg14.png" border="0"&gt;&lt;/a&gt;  &lt;td class="sbmDim" onmouseover="mOvr(this)" onmouseout="mOut(this)"&gt;&lt;a class="sbmDim" onmouseover="mOvr(this)" title="Post it to dotnetkicks" onmouseout="mOut(this)" href="http://www.dotnetkicks.com/kick/?url=http://blogs.technet.com/jkruse/archive/2008/02/08/uc-certificate-partners-for-exchange-and-ocs-2007.aspx&amp;amp;title=UC Certificate Partners for Exchange and OCS 2007" target="_blank"&gt;&lt;img src="http://blogs.msdn.com/blogfiles/rahulso/WindowsLiveWriter/IconsfordifferentSocialBookmarkingSites_B387/CropperCapture154.jpg" border="0"&gt;&lt;/a&gt;  &lt;td class="sbmDim" onmouseover="mOvr(this)" onmouseout="mOut(this)"&gt;&lt;a class="sbmDim" onmouseover="mOvr(this)" title="Post it to furl" onmouseout="mOut(this)" href="http://www.furl.net/store?s=f&amp;amp;to=0&amp;amp;u=http://blogs.technet.com/jkruse/archive/2008/02/08/uc-certificate-partners-for-exchange-and-ocs-2007.aspx&amp;amp;ti=UC Certificate Partners for Exchange and OCS 2007" target="_blank"&gt;&lt;img src="http://blogs.msdn.com/blogfiles/rahulso/WindowsLiveWriter/IconsfordifferentSocialBookmarkingSites_B387/furl4.png" border="0"&gt;&lt;/a&gt;  &lt;td class="sbmDim" onmouseover="mOvr(this)" onmouseout="mOut(this)"&gt;&lt;a class="sbmDim" onmouseover="mOvr(this)" title="Post it to live" onmouseout="mOut(this)" href="https://favorites.live.com/quickadd.aspx?marklet=1&amp;amp;mkt=en-us&amp;amp;url=http://blogs.technet.com/jkruse/archive/2008/02/08/uc-certificate-partners-for-exchange-and-ocs-2007.aspx&amp;amp;title=UC Certificate Partners for Exchange and OCS 2007" target="_blank"&gt;&lt;img src="http://blogs.msdn.com/blogfiles/rahulso/WindowsLiveWriter/IconsfordifferentSocialBookmarkingSites_B387/live4.png" border="0"&gt;&lt;/a&gt;  &lt;td class="sbmDim" onmouseover="mOvr(this)" onmouseout="mOut(this)"&gt;&lt;a class="sbmDim" onmouseover="mOvr(this)" title="Post it to magnolia!" onmouseout="mOut(this)" href="http://ma.gnolia.com/bookmarklet/add?url=http://blogs.technet.com/jkruse/archive/2008/02/08/uc-certificate-partners-for-exchange-and-ocs-2007.aspx&amp;amp;title=UC Certificate Partners for Exchange and OCS 2007" target="_blank"&gt;&lt;img src="http://blogs.msdn.com/blogfiles/rahulso/WindowsLiveWriter/IconsfordifferentSocialBookmarkingSites_B387/magnolia4.png" border="0"&gt;&lt;/a&gt;  &lt;td class="sbmDim" onmouseover="mOvr(this)" onmouseout="mOut(this)"&gt;&lt;a class="sbmDim" onmouseover="mOvr(this)" title="Post it to netvouz!" onmouseout="mOut(this)" href="http://netvouz.com/action/submitBookmark?url=http://blogs.technet.com/jkruse/archive/2008/02/08/uc-certificate-partners-for-exchange-and-ocs-2007.aspx&amp;amp;title=UC Certificate Partners for Exchange and OCS 2007" target="_blank"&gt;&lt;img src="http://blogs.msdn.com/blogfiles/rahulso/WindowsLiveWriter/IconsfordifferentSocialBookmarkingSites_B387/netvouz4.png" border="0"&gt;&lt;/a&gt;  &lt;td class="sbmDim" onmouseover="mOvr(this)" onmouseout="mOut(this)"&gt;&lt;a class="sbmDim" onmouseover="mOvr(this)" title="Post it to reddit!" onmouseout="mOut(this)" href="http://reddit.com/submit?url=http://blogs.technet.com/jkruse/archive/2008/02/08/uc-certificate-partners-for-exchange-and-ocs-2007.aspx&amp;amp;title=UC Certificate Partners for Exchange and OCS 2007" target="_blank"&gt;&lt;img src="http://blogs.msdn.com/blogfiles/rahulso/WindowsLiveWriter/IconsfordifferentSocialBookmarkingSites_B387/reddit4.png" border="0"&gt;&lt;/a&gt;  &lt;td class="sbmDim" onmouseover="mOvr(this)" onmouseout="mOut(this)"&gt;&lt;a class="sbmDim" onmouseover="mOvr(this)" title="Post it to shadow" onmouseout="mOut(this)" href="http://www.shadows.com/bookmark/saveLink.rails?page=http://blogs.technet.com/jkruse/archive/2008/02/08/uc-certificate-partners-for-exchange-and-ocs-2007.aspx&amp;amp;title=UC Certificate Partners for Exchange and OCS 2007" target="_blank"&gt;&lt;img src="http://blogs.msdn.com/blogfiles/rahulso/WindowsLiveWriter/IconsfordifferentSocialBookmarkingSites_B387/shadows6.png" border="0"&gt;&lt;/a&gt;  &lt;td class="sbmDim" onmouseover="mOvr(this)" onmouseout="mOut(this)"&gt;&lt;a class="sbmDim" onmouseover="mOvr(this)" title="Post it to spurl" onmouseout="mOut(this)" href="http://www.spurl.net/spurl.php?v=3&amp;amp;url=http://blogs.technet.com/jkruse/archive/2008/02/08/uc-certificate-partners-for-exchange-and-ocs-2007.aspx&amp;amp;title=UC Certificate Partners for Exchange and OCS 2007" target="_blank"&gt;&lt;img src="http://blogs.msdn.com/blogfiles/rahulso/WindowsLiveWriter/IconsfordifferentSocialBookmarkingSites_B387/spurl8.png" border="0"&gt;&lt;/a&gt;  &lt;td class="sbmDim" onmouseover="mOvr(this)" onmouseout="mOut(this)"&gt;&lt;a class="sbmDim" onmouseover="mOvr(this)" title="Post it to technorati!" onmouseout="mOut(this)" href="http://technorati.com/faves/?add=http://blogs.technet.com/jkruse/archive/2008/02/08/uc-certificate-partners-for-exchange-and-ocs-2007.aspx&amp;amp;title=UC Certificate Partners for Exchange and OCS 2007" target="_blank"&gt;&lt;img src="http://blogs.msdn.com/blogfiles/rahulso/WindowsLiveWriter/IconsfordifferentSocialBookmarkingSites_B387/technora4.png" border="0"&gt;&lt;/a&gt;  &lt;td class="sbmDim" onmouseover="mOvr(this)" onmouseout="mOut(this)"&gt;&lt;a class="sbmDim" onmouseover="mOvr(this)" title="Post it to wists" onmouseout="mOut(this)" href="http://www.wists.com/?action=add&amp;amp;url=http://blogs.technet.com/jkruse/archive/2008/02/08/uc-certificate-partners-for-exchange-and-ocs-2007.aspx&amp;amp;title=UC Certificate Partners for Exchange and OCS 2007" target="_blank"&gt;&lt;img src="http://blogs.msdn.com/blogfiles/rahulso/WindowsLiveWriter/IconsfordifferentSocialBookmarkingSites_B387/wists9.png" border="0"&gt;&lt;/a&gt;  &lt;td class="sbmDim" onmouseover="mOvr(this)" onmouseout="mOut(this)"&gt;&lt;a class="sbmDim" onmouseover="mOvr(this)" title="Post it to yahoo!" onmouseout="mOut(this)" href="http://myweb.yahoo.com/myresults/bookmarklet?u=http://blogs.technet.com/jkruse/archive/2008/02/08/uc-certificate-partners-for-exchange-and-ocs-2007.aspx&amp;amp;t=UC Certificate Partners for Exchange and OCS 2007" target="_blank"&gt;&lt;img src="http://blogs.msdn.com/blogfiles/rahulso/WindowsLiveWriter/IconsfordifferentSocialBookmarkingSites_B387/yahoo9.png" border="0"&gt;&lt;/a&gt;&lt;/td&gt;&lt;/tr&gt; &lt;tr&gt; &lt;td class="sbmText"&gt;&amp;nbsp;&lt;a href="http://settings.messenger.live.com/Conversation/IMMe.aspx?invitee=2b16bf02204879e5%40apps.messenger.live.com" target="_blank" mce_href="http://settings.messenger.live.com/Conversation/IMMe.aspx?invitee=2b16bf02204879e5%40apps.messenger.live.com"&gt;IM me!&lt;img alt="Click to IM Johann" src="http://messenger.services.live.com/users/2b16bf02204879e5@apps.messenger.live.com/presenceimage" border="0" mce_src="http://messenger.services.live.com/users/2b16bf02204879e5@apps.messenger.live.com/presenceimage"&gt;&lt;/a&gt;&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;&lt;/span&gt; &lt;div class="wlWriterSmartContent" id="scid:0767317B-992E-4b12-91E0-4F059A8CECA8:5dad3bc8-ad57-4b6b-aec6-589936878303" style="padding-right: 0px; display: inline; padding-left: 0px; padding-bottom: 0px; margin: 0px; padding-top: 0px"&gt;Technorati Tags: &lt;a href="http://technorati.com/tags/uc" rel="tag"&gt;uc&lt;/a&gt;, &lt;a href="http://technorati.com/tags/ocs" rel="tag"&gt;ocs&lt;/a&gt;, &lt;a href="http://technorati.com/tags/setup" rel="tag"&gt;setup&lt;/a&gt;, &lt;a href="http://technorati.com/tags/security" rel="tag"&gt;security&lt;/a&gt;, &lt;a href="http://technorati.com/tags/certificates" rel="tag"&gt;certificates&lt;/a&gt;&lt;/div&gt;&lt;img src="http://blogs.technet.com/aggbug.aspx?PostID=2847251" width="1" height="1"&gt;</description><category domain="http://blogs.technet.com/jkruse/archive/tags/setup/default.aspx">setup</category><category domain="http://blogs.technet.com/jkruse/archive/tags/uc/default.aspx">uc</category><category domain="http://blogs.technet.com/jkruse/archive/tags/ocs/default.aspx">ocs</category><category domain="http://blogs.technet.com/jkruse/archive/tags/security/default.aspx">security</category><category domain="http://blogs.technet.com/jkruse/archive/tags/certificates/default.aspx">certificates</category></item><item><title>Exchange 2007 certificates</title><link>http://blogs.technet.com/jkruse/archive/2007/07/05/exchange-2007-certificates.aspx</link><pubDate>Thu, 05 Jul 2007 06:31:00 GMT</pubDate><guid isPermaLink="false">d5e57398-b9ef-4490-9955-07cbb4e4a80d:1442420</guid><dc:creator>jkruse</dc:creator><slash:comments>0</slash:comments><comments>http://blogs.technet.com/jkruse/comments/1442420.aspx</comments><wfw:commentRss>http://blogs.technet.com/jkruse/commentrss.aspx?PostID=1442420</wfw:commentRss><wfw:comment>http://blogs.technet.com/jkruse/rsscomments.aspx?PostID=1442420</wfw:comment><description>&lt;P&gt;While I was having lunch with one of our Exchange Engineers today I asked "what is the most common support call that comes in for Exchange 2007?".&lt;/P&gt;
&lt;P&gt;The answer was certificates - customers can be confused about what type of certificate to get, what hostnames are used (most customers use different namespace internally than they do externally), what requirements TLS has, and of course they are completely unaware of things like Subject Alternative Name.&lt;/P&gt;
&lt;P&gt;Fortunately there is a great post at You Had Me At EHLO that explains more about this issue and how it can affect your Exchange deployment.&lt;/P&gt;
&lt;P&gt;&lt;A title=http://msexchangeteam.com/archive/2007/07/02/445698.aspx href="http://msexchangeteam.com/archive/2007/07/02/445698.aspx" mce_href="http://msexchangeteam.com/archive/2007/07/02/445698.aspx"&gt;&lt;STRONG&gt;http://msexchangeteam.com/archive/2007/07/02/445698.aspx&lt;/STRONG&gt;&lt;/A&gt;&lt;/P&gt;
&lt;P mce_keep="true"&gt;&amp;nbsp;&lt;/P&gt;
&lt;DIV class=wlWriterSmartContent id=0767317B-992E-4b12-91E0-4F059A8CECA8:d889672d-129b-4886-9673-71038442ee6e contentEditable=false style="PADDING-RIGHT: 0px; DISPLAY: inline; PADDING-LEFT: 0px; PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-TOP: 0px"&gt;Technorati Tags: &lt;A href="http://technorati.com/tags/exchange%202007" rel=tag mce_href="http://technorati.com/tags/exchange%202007"&gt;exchange 2007&lt;/A&gt;, &lt;A href="http://technorati.com/tags/certificates" rel=tag mce_href="http://technorati.com/tags/certificates"&gt;certificates&lt;/A&gt;&lt;/DIV&gt;&lt;img src="http://blogs.technet.com/aggbug.aspx?PostID=1442420" width="1" height="1"&gt;</description><category domain="http://blogs.technet.com/jkruse/archive/tags/exchange+2007/default.aspx">exchange 2007</category><category domain="http://blogs.technet.com/jkruse/archive/tags/security/default.aspx">security</category><category domain="http://blogs.technet.com/jkruse/archive/tags/certificates/default.aspx">certificates</category></item></channel></rss>