Multiple email domain certificates

Hello Experts,
We have exchange 2013 and want to host 5 email domains with that exchange server. Exchange sits on Win 2012 and have configured with autodiscover properly and it works for one domain. Please advice how we can configure public digicert certificate for
5 email domains. Do we need to request 5 digicert SAN certificates and import into exchange 2013 server and assign each domain separately.
or can i buy one digicert SAN certificate with 5 domain support and import and configure for 5 email domains in exchange 2013.
We want to enable certificates for OWA, Outlook Anywhere.
Please advise.
Thanks!
Regards, Ganesh, MCTS, MCP, ITILV2 This posting is provided with no warranties and confers no rights. Please remember to click Mark as Answer and Vote as Helpful on posts that help you. This can be beneficial to other community members reading the thread.

Hi,
Agree with Ed, we can add all the host names Autodiscover.*.com and the names in the OWA URLs in one certificate or multiple certificates.
Alternatively, to simplify the namespace, we can depend on Autodiscover redirection and public CNAME or SRV records.
To configure Autodiscover Redirection for the Multi-Tenant Organization, you can refer to the following article:
http://technet.microsoft.com/en-us/library/ff923256.aspx
For more information about the simplifier method, you can refer to the following article:
http://social.technet.microsoft.com/wiki/contents/articles/5787.exchange-2010-multi-tenant-autodiscover-and-dns-configuration.aspx
Moreover, here is a document about multi-tenancy (Hosted) Exchange 2013:
http://go.microsoft.com/fwlink/p/?LinkId=282659
Thanks,
Angela Shi
TechNet Community Support

Similar Messages

Lync 2013 certificate requirements for multiple SIP domains

Hi All,
I am engaged with a client in respect of a Lync 2013 implementation initially as a conferencing platform with a view to enabling EV functions (inc. PSTN conferencing) in the future. They initially need to support 30 SIP domains and eventually
around 100 SIP domains which is proving to be either not possible or severely cost prohibitive. Their current certificate provider, Thawte, can only support up to 25 SANs and have quoted them 5 figures. We tend to use GeoTrust as they are cheaper but they
appear to have a limit of 25 SANs. GoDaddy appear to support up to 100 SANs for a pretty reasonable cost. My questions are as follows:
Is there a way that I’m missing of reducing the number of SANs required on the Edge server?
Use aliases for access edge FQDNs - Supported by desktop client but not by other devices so not really workable
Don’t support XMPP federation therefore removing the need for domain name FQDNs for each SIP domain
Is there a way that I’m missing of reducing the number of SANs required on the Reverse Proxy server?
Friendly URL option 3 from this page:
http://technet.microsoft.com/en-us/library/gg398287.aspx
Client auto-configuration:
i.
Don’t support mobile client auto-configuration in which case no lyncdiscover.sipdomain1.com DNS records or SANs would be required.
ii.
Support mobile client auto-configuration over HTTP only in which case CNAME records are required for each SIP domain (lyncdiscover.sipdomain1.com, etc. pointing to lyncdiscover.designateddomain.com) but no SANs are required.
iii.
Support mobile client auto-configuration over HTTPS in which case DNS records are required for each SIP domain and a SAN entry for each SIP domains is also required. This is because a DNS CNAME to another domain is not supported over
HTTPS.
If the answer to 1 and/or 2 is no, are there certificate providers that support over 100 SANs?
How do certificate requirements differ when using the Lync 2013 hosting pack? I would think that this issue is something that a hosting provider would need to overcome.
Would the Lync 2013 Hosting Pack work for this customer? The customer uses SPLA licensing so I think is eligible to use the hosting pack but not 100% sure it will work in their environment given that client connections are supposed
to all come through the Edge where their tenants will be internal and also given the requirement for an ACP for PSTN conferencing.
Many thanks,

Many thanks for the response.
I was already planning to use option 3 from the below page for simple URLs to cut down on SAN requirement.
http://technet.microsoft.com/en-us/library/gg398287.aspx
What are the security concerns for publishing autodiscover over port 80? I.e. Is this only used for the initial download of the discovery record and then HTTPS is used for authentication? This seems to be the case from the following note on the below page:
http://technet.microsoft.com/en-gb/library/hh690030.aspx
Mobile device clients do not support multiple Secure Sockets Layer (SSL) certificates from different domains. Therefore, CNAME redirection to different domains is not supported over HTTPS. For example, a DNS CNAME record for lyncdiscover.contoso.com that redirects
to an address of director.contoso.net is not supported over HTTPS.
In such a topology, a mobile device client needs to use HTTP for the first request, so that the CNAME redirection is resolved over HTTP. Subsequent requests then use HTTPS. To support this scenario, you need to configure your reverse proxy with a web publishing
rule for port 80 (HTTP).
For details, see "To create a web publishing rule for port 80" in Configuring the Reverse Proxy for Mobility. CNAME redirection to the same domain is supported over HTTPS. In this case, the destination domain's certificate covers the originating
domain.”
I don’t think SRV records for additional SIP domain access edge is a workable solution as this is not supported by some devices.
As per the below article:
http://blog.schertz.name/2012/07/lync-edge-server-best-practices/
“The recommended approach for external client Automatic Sign-In when supporting multiple SIP domains is to include a unique Access Edge FQDN for each domain name in the SAN field. This is no longer a requirement (it was in OCS) as it is possible to
create a DNS Service Locator Record (SRV) for each additional SIP domain yet have them all point back to the same original FQDN for the Access Edge service (e.g. sip.mslync.net).
This approach will trigger a security alert in Windows Lync clients which can be accepted by the user, but some other clients and devices are unable to connect when the Automatic Sign-In process returns a pair of SRV and Host (A) records which do not share
the same domain namespace. Thus it is still best practice to define a unique FQDN for each additional SIP domain and include that hostname in the external Edge certificate’s SAN field”.
===================
1. Basically the requirement is to initially provide Lync conferencing services (minus PSTN conferencing) to internal, external, federated and anonymous participants with a view to providing PSTN conferencing and therefore enterprise voice services later.
2. The customer currently supports close to 100 SMTP domains and wants to align their SIP domains with these existing domains. The structure of their business is such that “XXX IT Services” provide the IT infrastructure for a collection of companies who
fall under the XXX umbrella but are very much run as individual entities.
Question:
Would you agree that I’m going to need a SAN for every SIP domain’s access edge FQDN?
Thanks.

TLS setup with multiple receiving domains

Hi,
We have our Ironport setup with about 10 receiving domains. My aim is to set it up so that all email sent and received from a particular domain (client.com) uses TLS. This domain will only send mail to our primary domain (company.com).
I am wondering how the TLS certificate will work with multiple domains? Is that cert just mapped to one email domain? Is a separate cert required for each domain, and so a separate listener for the receive domains that I don't need TLS for?

Hi Graham,
Yes it will be one certificate per box.
In reagrds to the TLS question you can set the TLS encryption to "Prefered" and take a lookt to the section create content filters for encryption.
http://www.cisco.com/en/US/docs/security/esa/esa7.5/ESA_7.5_Configuration_Guide.pdf
http://www.cisco.com/en/US/products/ps10154/products_user_guide_list.html
HTH,
Luis Silva
"If you need PDI (Planning, Design, Implement) assistance feel free to reach"
http://www.cisco.com/web/partners/tools/pdihd.html

Can Multiple email accounts on Galaxy S4 sync with iCloud & non-iCloud email?

Hello… has anyone successfully set up multiple email accounts (iCloud/Yahoo/AT&T/etc.) on their Samsung Galaxy S4 Jelly Bean 4.2? I searched the forums and it has been said that configuration settings depend on the combination of wireless service provider + device model + email providers + Android version.
My S4 is from AT&T and if this scenario can't work, I have to cancel my contract in a few days (although that would be the last resort). From checking the forums, not everyone has been able to get the S4 to work with iCloud. In my case, I hope to sync up with iCloud and non-iCloud email which might be trickier.
Here is one thread that helps with settings, but doesn't seem to address multiple or non-iCloud accounts: https://discussions.apple.com/message/22435596#22435596
Some background info…
Although Gmail just works on Android devices, I plan to primarily use Apple/Yahoo/AT&T email (at least initially).
I don’t yet have Apple mail/iCloud, but plan to. I am partially switched to the Mac (Mtn Lion), but haven’t completed the jump from Windows.
I don’t have an iPhone (so hopefully that makes the setup less complicated.)
I mostly care about email on the S4 (I’m not concerned about syncing up contacts, calendar, music, etc.).
Apologies for the long post, but hopefully I’ve included the necessary background info for the questions below:
Is it possible to setup multiple (iCloud/Yahoo/AT&T) emails on the Samsung Galaxy S4 from AT&T so that they sync nicely?
From the S4, if I reply to an email, will the Sender in the email reply be the same account which received the email? Or, (as I’ve read in the excerpt below) will the Sender for all email replies from the S4 be set from a fixed/primary account?
Although the first two questions above are the most urgent for now, I'd appreciate pointers if you see something that should be changed in the configuration settings below.
Thanks in advance!
--------------------------------- start of excerpt ---------------------------------
A post for setup on a previous model/OS version https://discussions.apple.com/thread/3636567?start=0&tstart=0
After spending quite some time trying to get my T-Mobile Samsung Galaxy S II setup with iCloud mail, this is what finally worked. Thanks to everyone for the various bits that helped lead me in the right direction. For those who need lots of detail, I hope the below helps. Please don't ask me about any other specific Android phones as I'm not expert but thought someone out there could benefit from my experience.
INCOMING SERVER SETTINGS
User Name: username (do not enter @me,com or @mac.com)
Password: (enter your password)
IMAP server: imap.mail.me.com
Security type: SSL
Port: 993
IMAP path prefix: p##- (you can find this by checking your account settings on your Mac. Mine was p03- so that's what I entered here)
Press NEXT
OUTGOING SERVER SETTINGS
SMTP server: smtp.mail.me.com
Security type: TLS
Port: 587
check the box next to "Require sign-in" if it's not already checked
User name: username (do not enter @me.com or @mac.com)
Password (enter your password)
Press NEXT
Your phone will check the server settings and you should be able to see your email now.
And another poster provided these additional tips…
Definitely select SSL/TLS and accept all certificates
Now here's the zinger: Authentication should be LOGIN
After figuring this out, I finally (after many hours of searching and testing) got to my outgoing server settings, which are: smtp.me.com
NONE for security type
Tic "Require Sign-in"
Authentication is PLAIN
And another poster's question about the Sender's email address for multiple accounts…
Managed to get this all set up however, Android only seems to allow you to send from your primary address and only reply from your primary address even if a mail was sent to one of the other addresses.
Any ideas how to get around this as I have three addresses beneath my primary which I need to both send from and reply from.
--------------------------------- end of excerpt ---------------------------------

> has anyone successfully set up multiple email accounts (iCloud/Yahoo/AT&T/etc.) on their Samsung Galaxy S4 Jelly Bean 4.2?
You're unlikely to find many people with experience of configuring multiple email accounts on a specific Samsung device, here on the Apple forum for an Apple service. Try the Samsung forums for help setting up your Samsung phone.
There are a few posts with general info relating to setting up an iCloud email account on Android here if you search though.

How do I access multiple email accounts

I just got my Bionic a few days ago and have set up multiple email accounts (work, gmail, yahoo). When I click the "email" icon only one account appears. I can't seem to find the inbox, etc for any of the other accounts. The only time I can find those messages is when a new message comes in and I get notified of it. Then I can catch the other messages.
How do I access the inboxes for all the accounts? This must be obvious but i'm missing it.

Questions are typically followed by a question mark. My answer answered your question.
Firefox doesn't do email, so there are no "Firefox email accounts". If you are accessing "email" with Firefox, you are using web mail. Some web mail services don't allow for direct access, they want their users to access their email from a "portal" or "main" page and will re-direct any attempt to load an "internal" web site page back to the main page.
As far as loading 3 different web mail accounts at the same time, if they are in the same domain it won't work on Firefox without a Firefox addon. http://br.mozdev.org/multifox/
IOW, if those three email accounts all with Yahoo, without that add-on you would have to logon to each email account separately and log out of the first before logging into the 2nd. Then log out of the 2nd before logging into the 3rd. Firefox isn't capable of having multiple session cookies for simultaneous logon's to the same server. That add-on provides that "multiple sessions cookies" feature.

How to setup multiple email accounts on one apple device It syncs to the rest of my apple devices?

I have a Macbook pro (10.8.2), iPad 4 (6.0.1), and iPhone 5 (6.0.1).
I have multiple email accounts set up on my iPhone:
3X Work
1X personal
1X School
They use Gmail and Microsoft exchange.
Is it possible to have all these accounts automatically created on my ipad and Macbook without typing in all info again?
Heres a visual:
I hope this makes it a little more clear.
I'm sure in the time it took me to type this, I could've manually added all the accounts to the devices lol
Oh, and iCloud > Mail is enabled on all devices.
Thanks for any and all help!

Your post is a bit open ended....
First thing - You need to decide if you want to use virtual domains or not.
If
     [email protected]
     [email protected]
     [email protected]
all should be separate mailboxes, then you need virtual domains.
If those 3 addresses can all go to the same mailbox, then you don't.
If you don't need virtual domains, then don't use them... things are simpler without that feature.
If thats the case, in the domain name field in Mail service, enter your primary domain.
You'll then need to enter your other domains via command line.
First, check your mail domain setting with:
sudo serveradmin settings mail:postfix:mydomain
Here is how you enter more than one domain:
- Quit the Server app
- Issue this with your domains between the quotes
sudo serveradmin settings mail:postfix:mydomain = "domain1.com, domain2.com"
- Restart postfix to activate your change
sudo postfix reload
If you open the Server app, you will notice both domains are now listed.

Calendar events created in iCal sending multiple email invites to invitees

Background:
Google Apps domain account
Lion and Snow Leopard iCal users syncing to Google Calendar
Problem:
1.A Lion user creates a new iCal event and invites multiple people to the event. The event is created and then an email invitation is sent to all invitees. Each invitee receives 6 - 10 email notices about the evet.
2. the event organizer changes the event time, multiple email notices go out to all invitees (6-10 emails each).
What is causing this problem and is there a way to fix it?
Thanks

iCal
http://www.apple.com/support/ical

Multiple Email Accounts Don't Seem Possible. Yet Mail Help Says It is!

Hi,
If you go to the Mail help menu and type in "multiple", the result shows that you can enter multiple email address into an account during setup, separated by commas. Great if you have several emails under the same domain ([email protected], [email protected], etc.)
The problem is this - the User Name is the full email address, so although I can enter my four email addresses under one domain, I cannot enter them as four separate user names, only one will work.
Am I missing something here? It's got me confused!
Thanks for any replies.
Hugh

Using an IMAP e-mail where you have several email addresses say ,...... @mac.com, ,[email protected] and [email protected] all pointing at the same server inbox yes you can use the comma separation method.
Emails sent to any of those addresses arrive on your computer altogether as YOU have just ONE user name !
If however you have differing POP and/or IMAP accounts each with differing user names POP inboxes and even SMTP sending systems you will have to set up each email account one by one.
Mail will allow you to have them combined into a single inbox on your computer.
You will also notice a triangle appears to the left of the inbox ,click on this and you will be presented with individual account inboxes within the main inbox

CUPS 8.6 - Supporting Multiple SIP Domains on a per-user basis

Working on a CUPS 8.6 PoC with a customer who currently is running a deployed OCS environment.
Users all sign into a single domain internally but have multiple SMTP domains for email as this customer has many different companies they have aquired.
OCS is able to support and route multiple SIP domains by specifing the SIP address under AD User settings such that two users both signed into the same OCS server can send IM's to each other even though they have different SIP addresses. sip:[email protected] , sip:[email protected]
CUPS on the other hand does not seem to allow this on a per-user basis. It places every user in the sip domain that the server is a member of.
The Jabber client allows you to specify a domain but I am not how this is used as the actual user account in CUPS is only ever the one domain and if you try and specify a different domain in the Jabber Connection Settings, it will not allow you to login.
It is not a big deal for internal communications if everyone is on the same domain, but where it is important is for future B2B IM. Users need to be able to give out THEIR IM address with THEIR respective domain.
Does anyone else know for a fact that I will only be able to have one domain per CUP cluster?
Any thoughts on this design?

Not sure on the design perspective but as for CUPS Domain, we can only have single domain per cluster. As you have already found out that for any user licensed for CUPS, their IM address would be userid@CUPSDomain
CUPS does have funtionality of federating with foreign domains such as AOL/GoogleTalk/WebEx Connect.

New deploy child domain certificate server didn't publish root trust certificate to the client

Child domain certificate didn't install into child domain workstation.
https://support.microsoft.com/en-us/kb/281271?wa=wsignin1.0
Certification Authority configuration to publish certificates in Active Directory of trusted domain
Any advise?
Thanks.

Hi,
>>New deploy child domain certificate server didn't publish root trust certificate to the client
Is this an enterprise root CA or standalone CA?
If it is an enterprise root CA, it will automatically use Group Policy to propagate its certificate to the Trusted Root Certification Authorities certificate store for all users and computers in the domain. If it is an standalone CA, we can configure GPO
to distribute the certificate.
Regarding how to use policy to distribute certificates, the following article can be referred to for more information.
Use Policy to Distribute Certificates
https://technet.microsoft.com/en-us/library/cc772491.aspx
We can run command gpupdate/force to immediately update group policy and then we can refresh the certificates in certmgr.msc to see if the certificate will come up.
Besides, for certificate questions, we can also ask for suggestions in the following forum.
Security
https://social.technet.microsoft.com/Forums/windowsserver/en-US/home?forum=winserversecurity
Best regards,
Frank Shen
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Outlook 2011 - configure outlook to display multiple email accounts.

I am having difficulty displaying multiple email accounts with their own default folders. I have tried multiple times and with no sucess. My email uses the POP settings. I have not had this issue with windows based programs. I had read somewhere that I may have to apply rule but I have seen some tutorials that apprear to work but my options that are available do not match the tutorials.

Your post is a bit open ended....
First thing - You need to decide if you want to use virtual domains or not.
If
     [email protected]
     [email protected]
     [email protected]
all should be separate mailboxes, then you need virtual domains.
If those 3 addresses can all go to the same mailbox, then you don't.
If you don't need virtual domains, then don't use them... things are simpler without that feature.
If thats the case, in the domain name field in Mail service, enter your primary domain.
You'll then need to enter your other domains via command line.
First, check your mail domain setting with:
sudo serveradmin settings mail:postfix:mydomain
Here is how you enter more than one domain:
- Quit the Server app
- Issue this with your domains between the quotes
sudo serveradmin settings mail:postfix:mydomain = "domain1.com, domain2.com"
- Restart postfix to activate your change
sudo postfix reload
If you open the Server app, you will notice both domains are now listed.

How do i add multiple email addresses to my calendar

How do I add multiple email addresses to my calendar on my iphone

You can create an email alias at the mail feature at iCloud.com

LDAP supporting multiple DNS domains

I have an environment with multiple DNS domains, and am configuring a Directory server (DS 6.3.1) to centralize various OS configuration maps including user authentication. None of the DNS domains have unique data, so I'd like to do something like storing all the real data in one suffix, then somehow have all clients look to that primary suffix. I am aware that the Solaris Native LDAP client wants to bind to a nisDomainObject that matches its DNS domain. I'm just having a hard time believing that I really need to manage all those individual suffixes when they don't have unique data requirements.
Take as an example the following domains to be supported: foo.example.com, bar.example.com, dev.example.com, qa.example.com, prd.example.com (no hosts are actually in "example.com", they are all in subdomains). Again, all share common configuration data, same user IDs, etc - no unique maps are required.
I created a suffix, "dc=example, dc=com", set it up with idsconfig. All is well there.
[A] My first thought is to bind all Solaris clients, regardless of their DNS domain, to the baseDN of "dc=example, dc=com" in order to avoid having a separate suffix for each DNS domain. I tried to do this using "-a defaultSearchPath=dc=example,dc=com" with ldapclient init, but it failed with an error indicating it wants to see the nisDomainObject of its real DNS domain.
The second though I had, which I don't believe is possible, is to find some sort of a LDAP equivalent of a symbolic link so that I could actually have an object for each DNS domain, but it would simply point back to "dc=example,dc=com". I can't find anything in the documentation which suggests this is possible, but I'd love to be wrong!
[C] Perhaps this could be somehow done with a rats nest of SSDs, but that really seems unwieldy, right? I plan on using a fair amount of the available objects, so it would be many SSDs per suffix. Yuck.
Can anyone comment on my above thoughts, or provide how they would go about supporting multiple DNS domains that have common configuration data?
Thank you,
Chris

Ok, I answered my own question. Turns out it's pretty easy. Just use the "-a domainName=example.com" option with `ldapclient` then make sure that the FQDN of the LDAP server is available (or use its IP address). My problem was that the ldapclient overwriting nsswotch.conf was clobbering the SSL session because I used the FQDN which couldn't resolve.
This leaves an interesting condition of having the output of "domainname" not match the DNS domain. I'm testing now to see if this causes any unexpected issues with our environmnet, but I suspect it's not a problem.

Linking multiple emails to a single event in ical and/or to do's

Hi:
Often I receive emails and I want to link them to an event in ical. OS X does this just fine as long as there is date in the email that OS X can recognize. The problem is sometimes I get multiple emails relating to the same event and I would like to be able to link all of those emails to one single event in ical. My same questions applies to 'to do' items.
And a follow up question--say I receive an email that has no date explicit in the text-I've tried to find some function that would allow me to schedule a new event in ical and would link that email to it. (I hope that all makes sense) I'm open to whatever solution I'll even pay money for 3rd party software if anyone knows of a good program. But I"m looking to stick to the basic ical interface. Any suggestions?

Hi rtwigg,
seems this is one of visio graphics limitation regarding the external data.
visio graphics, may only support for one row.
you may consider this idea :
"It is a good idea to separate your rows into visual units so that you have everything you need and nothing else in a single row. To link a shape to a data row, simply drag the row from the external data window and drop it on the shape. A default data
graphic should immediately appear next to the shape displaying some data from the row. From here you are able to customize the graphic to fit your needs"
by means, you may need to use the visio client.
http://blogs.msdn.com/b/visio/archive/2010/02/05/no-code-mashups-with-visio-services-and-web-part-connections.aspx
http://msdn.microsoft.com/en-us/library/ff408345.aspx
http://msdn.microsoft.com/en-us/library/ff394649.aspx
http://blogs.msdn.com/b/visio/archive/2010/02/21/the-visio-services-javascript-mashup-api.aspx
Regards,
Aries
Microsoft Online Community Support
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Sending multiple email for free goods item category??

Hi,
we have requirement to send email (Z report in smartforms) automatically when sale order save in tcode VA01/VA02.
we made reqd config in tcode NACE and we set access sequence on ORDER TYPE and it's working fine. but the problem is that when order booked for item category free goods it sends multiple emails. (i.e. no. of line items = no. of email) for one order no. All other item category is working fine. only problem with the free goods.
I am an abaper. all config are made with the consent of SD consultant.
pls help.
thanks
Radhashyam Sahoo.

If you are an ABAPer, then it sounds like you simply need to debug the processing to identify where/why the fault occurs. As for the NACE settings, you should understand the config as well as your functional counterpart. It will make you a better developer and help you understand the processing code.

Multiple email domain certificates

Similar Messages

Maybe you are looking for