EV Office Mail App for Exchange 2013

[SHI-CRO]

I’ve been trying to get the EV Office Mail App to work for OWA on Exchange 2013 servers and have some questions I hope might be answered here:

1. I see in the documentation it says:

You must configure HTTPS with a suitable certificate on Enterprise Vault servers that serve the Enterprise Vault Office Mail App. Office Mail Apps must be served using Secure Sockets Layer (SSL).  We recommend that you obtain a certificate from a certification authority.  Otherwise, if the certificate is from another source, a browser may display a warning and require the user to accept the certificate. Prompting for acceptance of a certificate is not available in the Office Mail App. The result is that the user sees a blank window in the Office Mail App.  You do not have to configure Enterprise Vault to use HTTPS at site level.

So which web directory do you configure to use the certificate?

2.  It also shows the EMS script to deploy the app:

$Mbx = get-mailbox "mailbox"

New-App -mailbox $Mbx.LegacyExchangeDN –Url `("http://EV_server/EnterpriseVault/OfficeMailAppManifest.aspx?LegacyMbxDn=" + $Mbx.LegacyExchangeDN)

            Should that read HTTPS://EV_Server/.....?

3. I’ve executed the deployment script above on my Exchange 2013 server (my EV server doesn’t have a certificate installed), and I see the Enterprise Vault app in OWA, but the screenshot shows what I get.  Would installing a certificate fix that?

[AndrewB]

you're probably right. that's exactly what they show in the troubleshooting video. check it out

https://www-secure.symantec.com/connect/videos/enterprise-vault-exchange-2013-owa-support-troubleshooting

[RichardG]

The certificate goes on the standard "EnterpriseVault" virtual directory.

The example powershell script is correct. The configuration can be done with http, if you have https setup then you can also use that, but it not a requirement.

However, https is required for the App to work in OWA - that is a Microsoft requirement for all Mail Apps.

[SHI-CRO]

Thanks Richard.

One more question:  Does the certificate need to be generated with the EV server alias?  or the host name? or both?

[SHI-CRO]

Is it safe to assume that we can use the alias to create the certificate request?  Fully qualified name, I assume?

[AndrewB]

i would get a SAN cert and include all the names