TLS on SMTP VS

7 Jun 2006 2:35 PM

Bryan

I have a 2 node Exchange 2003 Cluster. I am going to journal all email to
Microsoft's Exchange Hosted Services. I have configured a second SMTP Virtual
Server and will send all journaled mail over this VS. If I enable TLS on this
virtual server I will require an SSL certificate.

Do I need to install an SSL certificate on both cluster nodes?

Do I use the same SSL certificate or do I need 2 different ones?

7 Jun 2006 4:30 PM

Mark Arnold [MVP]

On Wed, 7 Jun 2006 07:35:02 -0700, Bryan
<Br***@discussions.microsoft.com> wrote:

>I have a 2 node Exchange 2003 Cluster. I am going to journal all email to
>Microsoft's Exchange Hosted Services. I have configured a second SMTP Virtual
>Server and will send all journaled mail over this VS. If I enable TLS on this
>virtual server I will require an SSL certificate.
>
>Do I need to install an SSL certificate on both cluster nodes?
>
>Do I use the same SSL certificate or do I need 2 different ones?

On each node and only one cert.

17 Jun 2006 12:04 AM

todd5574

Mark Arnold [MVP] wrote:
Show quote

> On Wed, 7 Jun 2006 07:35:02 -0700, Bryan
> <Br***@discussions.microsoft.com> wrote:
>
> >I have a 2 node Exchange 2003 Cluster. I am going to journal all email to
> >Microsoft's Exchange Hosted Services. I have configured a second SMTP Virtual
> >Server and will send all journaled mail over this VS. If I enable TLS on this
> >virtual server I will require an SSL certificate.
> >
> >Do I need to install an SSL certificate on both cluster nodes?
> >
> >Do I use the same SSL certificate or do I need 2 different ones?
>
> On each node and only one cert.

Hi Mark,
Is there any documentation for installing the certs on a Ex 2003
cluster? We installed a cert with TLS following kb article
http://support.microsoft.com/kb/829721 on our SMTP Virtual Server. It
works fine as long as the node that owns the cert is active. When the
cluster fails over to the other node the cert no longer works and mail
does not come in. I just need documentation that supports installing
the same cert on both nodes.
Thanks,
Todd