Understanding Redirection for Outlook Anywhere with a Single SSL Certificate

Applies to: Exchange Server 2010 SP3, Exchange Server 2010 SP2

When Microsoft Office Outlook 2007 or Outlook 2010 clients aren't joined to your domain or don't have direct access to Active Directory in your Exchange forest, you can redirect them. When the Outlook clients are redirected, they can access Exchange Web services, such as the Autodiscover service, the offline address book, and Unified Messaging, in your Exchange 2010 organization.

You can set up your Outlook Anywhere deployment to use a single Secure Sockets Layer (SSL) certificate with redirection. For information about how to do this, see Configure Outlook Anywhere to Use an SSL Certificate with Redirection.

Looking for other management tasks related to Outlook Anywhere? See Managing Outlook Anywhere.

Using a Single SSL Certificate with Redirection

After you configure Exchange to use an SSL certificate with redirection, clients that aren't domain-joined and clients that don't have direct connectivity to Active Directory receive a redirect from the Autodiscover site to the site that's dedicated to handling e-mail. When this occurs, a warning message is displayed in Outlook 2007 and Outlook 2010 that says Allow this website to configure server settings? Both Outlook 2007 and Outlook 2010 give users the opportunity to prevent this warning message appearing in the future. We recommend that you inform your users that they can turn off the warning message on their Outlook 2010 or Outlook 2007 client.

Using a Single SSL Certificate with Redirection for Hosting Scenarios

You can use a single SSL certificate with redirection if you're hosting multiple Simple Mail Transfer Protocol (SMTP) domains and you don't want to obtain a separate SSL certificate for each domain. In this hosting scenario, after you've configured the Autodiscover redirect site, you would need to create a DNS entry in each of the domains to have the Autodiscover service point to this non-SSL redirect site. This redirect site would redirect all clients that are connecting to your SMTP domains to a single URL, such as https://mail.contoso.com/autodiscover/autodiscover.xml. For more information, see Configure Outlook Anywhere to Use an SSL Certificate with Redirection.

 © 2010 Microsoft Corporation. All rights reserved.