It is this
limitation that sometimes stops organizations from installing their own CAs.
Either third-party CA certificate generation or internal CA generation is required for SSL
support on OWA. These deployment options are illustrated in the subsequent sections of
this chapter.
Installing a Third-Party CA on an OWA Server
If a third-party certificate authority will be used to enable SSL on an OWA server, then a
certificate request must first be generated directly from the OWA server. After this request
has been generated, it can be sent off to the third-party CA, who then verifies the identity
of the organization and sends it back, where it can be installed on the server.
If an internal CA will be utilized, this section and its procedures can be skipped, and
readers can proceed directly to the subsequent section, ???Using an Internal Certificate
Authority for OWA Certificates.???
NOTE
Although it is not a direct part of ISA Server, having an SSL-protected OWA server is the
first step in protecting traffic to the OWA server, and is therefore illustrated in this
chapter. It is possible to secure an OWA server without using SSL, through basic HTTP
securing techniques, but it is highly recommended to use SSL where possible.
Pages:
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532