Securing Your Outlook Web Access 2000 Implementation Using SSL

Creating a CSR

  1. Using the Internet Services Manager.
  2. Right click on the website that is hosting your OWA component (this is by default the "Default Web Site") and open its properties.

    IIS - OWA
  3. Select the "Directory Security" tab, and then click on "Server Certificates". The "Web Server Certificates Wizard" will now be displayed, click Next.
  4. On the "Server Certificate" dialog box (below), select "Create a new certificate",then click Next.

    SSL Certificate Wizard
  5. In the "Delayed or Immediate Request" dialog box (below), select, "prepare the request now, but send it later",then click Next.

    SSL Request - OWA
  6. Next you are presented with the "Name and Security Settings" dialog box (below). Provide your new certificate a name and select the level of security you would like to use (it is not recommended that you select over 1024 as this will have an adverse effect on your server performance), click Next.

    SSL Security Settings
  7. In the "Organization Information" dialog box (below), enter the name of your organization. This should be as you want it to appear on any legal documents as this is the name that will appear in your certificate. The organizational unit can be a location, department or business unit within your company.

    SSL Organization Information - OWA
  8. In the "Common Name" dialogue box (below), you must enter the FQDN of our web server.

    Qualified Domain Name in OWA
  9. You are now presented with the "Geographical Information" dialog box (below). It is important to make sure you enter the State in full, for example "New York" not just "NY". Abbreviating State names will be rejected at the end of the Certificate Wizard.

    SSL Geographical Information in OWA
  10. The last step is to specify the location of the Certificate Request File, remember where and what you called this as you will need it later.

    SSL Certificate File Name Request
  11. The "Request File Summary" will now appear (below). Make sure everything is okay then click Next to process the request.

SSL Request File Summary - OWA

You have now created a "Certificate Signing Request" which will be needed when you apply for your certificates.