Microsoft works with public X.509 certification authorities (CAs) to make sure that Microsoft Exchange Server customers can obtain the certificates that they require in order to use Microsoft Exchange Server 2007 for the Domain Security feature to enable secure client access from the Internet.

Microsoft also works with CAs in order to make sure that Microsoft Office Communications Server 2007 customers can obtain certificates that they require for Communications Server 2007 servers.

Back to the top

Many public certification authorities have created Exchange-specific Web sites that provide relevant documentation about their service. The documentation that is provided includes steps to complete the following tasks:

•	To complete the certificate enrollment process
•	To deploy the Domain Security feature
•	To enable secure client access from the Internet

The following table includes the name and the Web site for the certification authorities that issue Unified Communications Certificates for Microsoft Exchange and for Communications Server 2007.

Certification authority	Web site
Entrust	http://www.entrust.net/microsoft/ (http://www.entrust.net/microsoft/)
Comodo	http://www.comodo.com/msexchange (http://www.comodo.com/msexchange)
DigiCert	http://www.digicert.com/unified-communications-ssl-tls.htm (http://www.digicert.com/unified-communications-ssl-tls.htm)

Note Public X.509 certification authorities who want to be added to this list and Exchange customers who want to provide feedback about the documentation that is provided on the X.509 certification authority Web sites can contact Microsoft at the following e-mail address: For more information about the SAN attribute and certificates, visit the following Microsoft Web sites: For more information about how to generate and install a certificate with SAN entries, visit the following Exchange 2007 Wiki Web site: Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.

Back to the top

Obtaining Unified Communications certificates for Microsoft Exchange

For more information about how to use the Exchange Management Shell to create a certificate request file that contains a certificate request in PKCS#10 format, visit the following Web sites:

Back to the top

Obtaining Unified Communications certificates for Communications Server 2007

1.	Generate certificate signing requests (CSRs) by using the Communications Server 2007 Certificate Wizard. Note This wizard is available when you install Communications Server 2007.
2.	Submit the CSR that you generated to the certification authority at the Web sites that are mentioned previously in this article.
3.	After you obtain the certificate and you have saved the certificate file to your computer, use the same Communications Server 2007 Certificate Wizard to install the certificate.

For more information about the Communications Server 2007 Certificate Wizard and about how to install certificates for Communications Server, see the deployment documentation that is available on the Communications Server 2007 Technical Library at the following URL: The third-party products that this article discusses are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, about the performance or reliability of these products.

Back to the top