Webapp in Exchange 2013 for OWA

[btrowdy]

Enterprise vault in our organization is setup wtihout SSL currently. I believe with the new OWAwebapp the requirement is to use SSL. I currently have a star cert for my company, but no SAN cert for the indernal name. Unfortunally everything is deployed with evserver.mycompany.local. I don't want to perform a change and have all shortcuts regenerated to move over to an externally name.

Can I create an alias for evserver.mycompany.com and register a starcert on the Enterprise Vault server, utalizing this for the OWAWebApp? Can I continue to use the non SSL internal name without requiring a SAN cert i.e. evserver.mycompany.local (non SSL)?

Thanks for any guidance you can provide.

[RichardG]

You do need to setup HTTPS access to the EnterpriseVault virtual directory to use the Office Mail App, however you don't need to change over the rest of EV to use HTTPS as long as you leave HTTP configured on the virtual directory.

[btrowdy]

Thanks for the quick reply

Would there be a reference article on the proceedure for this? Do I just enable SSL on the root website and publish the Cert or is there more to it than that?

[AndrewB · Accepted solution]

here you go:

Enterprise Vault 10.0.3 and later: Requesting and Applying an SSL Certificate

Article:HOWTO83452

|

Created: 2013-01-20

|

Updated: 2013-07-04

|

Article URL http://www.symantec.com/docs/HOWTO83452

there's also a section in Setting_up_Exchange_Server_Archiving.pdf called "Setting up the Enterprise
Vault Office Mail App" if that helps

[btrowdy]

I have linked our external star cert to the EV Server and created a DNS alias for evserver.domainname.com. I have tested and can connect to https or http and the Enterprise Vault directory with no issues.

I have now registered the webapp with my mailbox with no errors. Opeing a vaulted emal I do see the Enterprise Vault icon. When expanding the icon I get the following.

App ErrorSomething went wrong and we couldn't start this app. Please try again later or contact your system administrator.

Does the fact we use an internal name for the EV sever cause an issue?  the DNS entry I made is evserver.domain.com and similar when I registered the webapp, however I do see domain.local when I go directly to the URL.

https://evserver.domain.com/EnterpriseVault/OfficeMailAppManifest.aspx?LegacyMbxDn=MyLegacyDN

<?xml version="1.0" encoding="utf-8" ?>

- <OfficeApp xmlns="http://schemas.microsoft.com/office/appforoffice/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="MailApp">

<Id></Id>

<Version>1.0</Version>

<ProviderName>Symantec</ProviderName>

<DefaultLocale>en-us</DefaultLocale>

<DisplayName DefaultValue="Enterprise Vault" />

<Description DefaultValue="Enterprise Vault saves space in your mailbox by automatically moving emails and their attachments from the folders in your mailbox to an online storage area called a vault. This process is called archiving." />

<IconUrl DefaultValue=https://EVSERVER.domain.local/enterprisevault/OfficeMailAppIcon.png />

- <Capabilities>

<Capability Name="Mailbox" />

</Capabilities>

- <DesktopSettings>

<SourceLocation DefaultValue=https://EVSERVER.domain.local/enterprisevault/OfficeMailApp.htm />

<RequestedHeight>82</RequestedHeight>

</DesktopSettings>

- <TabletSettings>

<SourceLocation DefaultValue=https://EVSERVER.domain.local/enterprisevault/OfficeMailApp.htm?Device=Tablet />

<RequestedHeight>82</RequestedHeight>

</TabletSettings>

- <PhoneSettings>

<SourceLocation DefaultValue=https://EVSERVER.domain.local/enterprisevault/OfficeMailApp.htm?Device=Phone />

</PhoneSettings>

<Permissions>ReadWriteMailbox</Permissions>

- <Rule xsi:type="RuleCollection" Mode="Or">

<Rule xsi:type="ItemIs" ItemType="Message" />

<Rule xsi:type="ItemIs" ItemType="Appointment" />

</Rule>

<DisableEntityHighlighting>false</DisableEntityHighlighting>

</OfficeApp>

[btrowdy]

Thanks for responding. I do have a few questions for you.

1. Does the EV server need to be accessible externally for remote users to access EV content? or perhaps the CAS server accesses the server internallly and passes the view on.

2. we use evserver.domain.local internally. I have registered a DNS alias for use with the Webapp at evserver.domain.com matching my star cert.Does this cause any issues accessing items?

I have registered the SSL star cert and can access the enterprisevault virtual directory from SSL and non SSL. I do however get an error when I try opening the Enterprise Vault section from inside a mail message in owa.

App ErrorSomething went wrong and we couldn't start this app. Please try again later or contact your system administrator.

When I access the URL directly from a bowser internally. I get many references to https://evserver.domain.local/

http://evserver.domain.com/EnterpriseVault/OfficeMailAppManifest.aspx?LegacyMbxDn=mylegacydn