Exchange证书加域问题

连国 于 505 Reputation points
2023-11-22T05:39:12.4066667+00:00

工程师，您好

考虑给Exchange购买一张公网付费的证书，用户IIS服务，假设这个证书是A。

另外还需要使用公司内部自建证书CA来对发送的邮件进行签名加密处理，假设这个内部证书是B。

那么在Exchange服务器端，A证书和B证书，如何来分配承载的服务？

Exchange Server Development
Exchange Server Development
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Development: The process of researching, productizing, and refining new or existing technologies.
526 questions
Exchange Server Management
Exchange Server Management
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Management: The act or process of organizing, handling, directing or controlling something.
7,469 questions
Accepted answer
  1. Yuki Sun-MSFT 41,006 Reputation points
    2023-11-22T07:52:41.6033333+00:00

    Hi @连国 于 ,

    您好，如果内部证书B只需要用于对发送的邮件进行签名加密处理，是不需要在Exchange服务器端为其分配任何服务的。

    所以您可以将IIS和SMTP服务都分配给A证书。另外，如果您的环境重有POP和IMAP服务的需求，且没有其他专门用于这两个服务的证书的话，可以把POP和IMAP也都分配给A证书:

    Enable-ExchangeCertificate -Thumbprint <Thumbprint> -Services POP,IMAP,IIS,SMTP

    关于给证书分配Exchange服务的更多信息，您可以参考：将证书分配给 Exchange Server 服务。

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest