Question : Which names to include in Exchange 2010 SAN certificate

We have to introduce exchange 2010 to an exchange 2003 org with a single exchange 2003 SP2 server (exchange1). Exchange 2010 will add 2 MBX servers (DAG1, DAG2) and 2 HUB/CAS servers (HUBCAS1, HUBCAS2) configgured as NLB CAS array (mail).

Actual Exchange 2003 Org:
Server names: exchange1(netbios), exchange1.domain.local(dns)
OWA & Outlook Anywhere for external users via ISA 2004: owa.domain.com

I want to know which names to include in the SAN certificate request to support all the possible scenarios:
-Servers NETBIOS names: cas1, cas2
-Servers internal DNS names: cas1.domain.local, cas2.domain.local
-NLB CAS Array: mail (netbios), mail.domain.local (dns)
-Services to provide for external users: OWA, ActiveSync, Outlook Anywhere (mail.domain.com), Autodiscover(autodiscover.domain.com)
-Legacy Exchange: legacy(netbios), legacy.domain.local(internal dns), legacy.domain.com(external dns)

My thought is to include:

cas1;
cas2;
cas1.domain.local;
cas2.domain.local;

mail;
mail.domain.local;
mail.domain.com;

autodiscover.domain.local;
autodiscover.domain.com;

legacy;
legacy.domain.local;
legacy.domain.com;

Are these the correct names?

Thanks.

Answer : Which names to include in Exchange 2010 SAN certificate

yes pretty much correct, I wouldn't bother with the netbios names and replace legacy.domain.com and legacly.domain.local by owa.domain.com. and owa.domain.local
Random Solutions  
 
programming4us programming4us