Comments on: OCS 2007 Installation – Part 2

By: Paid Proxy

Paid Proxy — Mon, 11 May 2009 23:02:50 +0000

Crazy how many people still use and others profit with web proxies.

By: Tom Pacyk

Tom Pacyk — Tue, 21 Apr 2009 06:30:16 +0000

Edgar, you can definitely support multiple SIP domains through a single Edge server. You'lll need a SAN certificate and if you want to support automatic client configuration, an SRV record for each SIP domain.

I'd definitely recommend using a vendor such as Digicert for your SAN cert though. They are significantly cheaper than Verisign and have the same degree of compatibility.

By: edgar corona

edgar corona — Mon, 20 Apr 2009 22:53:17 +0000

I will redeploy the access edge server and I have a doubt about the kind of certificate that I need. We are going to have several sip domains but we will have only one access edge server so this is the point where I got confuse: Do I need one DNS srv record for each domain that externally wants to access the access edge server? Does Verisign have this kind of certificate with SAN?

By: Atif

Atif — Fri, 26 Dec 2008 05:42:42 +0000

Hello Elliot Nehme,

in your case the OCS server system must be a member of the AD, and must be logged on that system in with administrative rights rights of AD, in LAN Configuration give the DNS IP, and start installation, OCS will automatically pick the AD of you network, so as the DNS of you network. I think this will help you.

Atif

By: Elliot Nehme

Elliot Nehme — Wed, 08 Oct 2008 11:01:22 +0000

Hello there,

I followed step by step the above procedure but my front end server service won’t start. I deployed a standard edition of OCS 2007 (trial version) downloaded from microsoft website. I have my AD and DNS servers on another pc (both pcs have windows server 2003 SP2).

Please any help will be hugely appreciated :D:D

Thanks a lot

By: HEmal

HEmal — Wed, 23 Jul 2008 06:23:31 +0000

Thanks, Its nice post. Saved many hours.

By: Tom

Tom — Wed, 02 Jul 2008 15:18:24 +0000

ISA will read all the SANs in a cert on a listener. The limitation comes in if you use a SAN on the internal web site that you are reverse proxy-ing.

By: Out_theBack

Out_theBack — Wed, 02 Jul 2008 08:19:37 +0000

How many SAN on ISA 2006 with OCS 2007 and Exchange 2007 OWA anywhere. Is this right ?

When ISA 2006 has a listener for https and it is used for Exchange 2007 OWA, the SSL listener certificate will have Subject Alternative Names (SAN) of mail.myorg.local, mail.myorg.com, autodiscover.myorg.com and thirdly SAN names of sip.myorg.com, im.myorg.com. when you have OCS 2007.

Does ISA 2006 only read 2 SAN names anyway?

Out_theBack

By: Don

Don — Sun, 22 Jun 2008 20:45:31 +0000

Kristin Make sure the /role:xx is correct for your versionm whether ee or se when you run the validation check

By: Sylvester

Sylvester — Wed, 18 Jun 2008 19:52:04 +0000

I am following Microsoft’s OCS lab setup instructions. I have created a new certificate template for server authentication by duplicating the web server template and configured it for autoenrollment. However, I don’t see the template when I use http://contoso.ad/certsrv or in the OCS deployment/configure certificate wizard. I see that a certificate based on this template has been issued in the consol Root/Certificates(local Computer)/Personal/Certificates. Any insight would be greatly appreciated.

Sylvester