RPC/HTTP on a second exchange server

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

rpc/http - 20 Jun 2006 12:10 GMT

Hi Experts,
This will be a one domain two sites structure. Each site will have an
Exchange server forming a one org, one AG, two RG exchange system.
The first DC/GC/Exchange server has RPC/HTTP enabled. The second DC/Exchange
server will be added in the new site. The question is how to enable PRC/HTTP
on this second DC/GC/Exchange server? Does it need a separate certificate
for HTTPS and RPC proxy server?
Thanks in advance,

Reply to this Message

Bharat Suneja [MVP] - 20 Jun 2006 14:56 GMT

Just as you did on the first server.
Yes, it will need a separate cert, unless you're using a Front-End server.

Signature

Bharat Suneja
MVP - Exchange
www.zenprise.com
NEW blog location:
www.exchangepedia.com/blog
----------------------------------------------

> Hi Experts,
> This will be a one domain two sites structure. Each site will have an
[quoted text clipped - 4 lines]
> separate certificate for HTTPS and RPC proxy server?
> Thanks in advance,

Reply to this Message

rpc/http - 21 Jun 2006 03:39 GMT

Thanks Bharat,
the problem is that the first server was transited from a SBS server where
there is a SBSCert installed but the certificate service was not.
The second server is a win2k3 std. The docs says it needs to install a CA
for the SSL, HTTPS and RPC/HTTP to work. Is there any refs for how to do
this?
If installing a CA on the second server would it affect the first server?

> Just as you did on the first server.
> Yes, it will need a separate cert, unless you're using a Front-End server.
[quoted text clipped - 6 lines]
>> separate certificate for HTTPS and RPC proxy server?
>> Thanks in advance,

Reply to this Message

David Elfassy - 21 Jun 2006 04:06 GMT

No, install the CA will not affect the cert installed on another server on
your network.
To install the CA, start with this :
http://technet2.microsoft.com/WindowsServer/en/Library/d6eab6a4-a680-40b0-9fde-4
978be14ebf41033.mspx?mfr=true

> Thanks Bharat,
> the problem is that the first server was transited from a SBS server where
[quoted text clipped - 15 lines]
>>> separate certificate for HTTPS and RPC proxy server?
>>> Thanks in advance,

Reply to this Message

rpc/http - 21 Jun 2006 05:01 GMT

Thanks David,
Glad to hear about this.
This is the place I really need help.
I tried to install an enterprise CA on the second server but right after
that the RAS (VPN) on both servers stopped working and there were errors on
autoenrollment. I ended up un-installing the CA. If I only want to enable
rpc/http, is there a simply step-by-step guide?
regards,

> No, install the CA will not affect the cert installed on another server on
> your network.
[quoted text clipped - 20 lines]
>>>> separate certificate for HTTPS and RPC proxy server?
>>>> Thanks in advance,

Reply to this Message

David Elfassy - 21 Jun 2006 16:02 GMT

Well MS has this:
http://support.microsoft.com/?kbid=833401
Daniel Petri has this: (for a single server setup)
http://www.petri.co.il/configure_rpc_over_https_on_a_single_server.htm
And i'm sure you'll find many others if you look around...

> Thanks David,
> Glad to hear about this.
[quoted text clipped - 30 lines]
>>>>> a separate certificate for HTTPS and RPC proxy server?
>>>>> Thanks in advance,

Reply to this Message

rpc/http - 22 Jun 2006 02:07 GMT

Thanks very much for the links.
But I really need is the step-by-step guide to set up a windows CA on the
server just for the purpose of rpc/http.
In particular, do I need to choose enterprise or stand alone CA and how to
configure it so that it will not affect other servers in the domain?
As I mentioned before I ran into trouble after installing an enterprise CA
on this second server.

> Well MS has this:
> http://support.microsoft.com/?kbid=833401
[quoted text clipped - 36 lines]
>>>>>> a separate certificate for HTTPS and RPC proxy server?
>>>>>> Thanks in advance,

Reply to this Message