ACE and SSLM support Subject Alternative Name (SAN)

[nouman_nabi]

Hi

I want to  migrate Exchange server to Exchange 2010, I would like to know if ACE and SSLM support Subject Alternative Name (SAN).

1.   Can the current CSM (WS-SVC-SSL-1-K9) support SSL certificates that have Subject Alternative Names? I.e. a certificate that has both of these names in it.

a.       exchange.ww.edu

b.       legexchange.ww.edu.

2)      Can the new ACE( ACE20-MOD-K9) support SSL certificates that have Subject Alternative Names? I.e. a certificate that has both of these names in it:

a.       exchange.ww.edu

b.       legexchange.ww.edu

Thanks

Nomi

[Fabrizio Pedracini]

Hi Nomi,

ACE does not care whether you have a certificate with subject-alternative-name or not. It works as long as you import it in x509 format. The ACE itself will not be able to generate a CSR with a SAN field, so you would need an external tool to generate the CSR. The CSM-S should behave the same way.

hope this helps,

Fabrizio