Configuring Exchange 2007 Client Access Server with LoadBalancer

To configure Multiple Exchange 2007 client access server with load balancer we need to Offload Certificate to the load balancer.

Offloading Certificate is the process where we uploaded certificate into the load balancer and this box will accept the request and decrypt the certificate and it will create a new session from the load balancer to the exchange servers. This is called SSL termination where SSL Session from the client is terminated at the LB and new session is created between the Server and Load Balancer

To configure SSL offloading for Outlook Web Access, you must perform the following procedure on each of your Client Access servers. Below is the link which gives the details description on configuring Client Access Servers

http://technet.microsoft.com/en-us/library/bb885060.aspx

Below link on F5 Load balancer which has details description on how to configure for Exchange 2007 Client Access server for OWA, Active Sync, Pop3, IMAP etc

http://www.f5.com/pdf/deployment-guides/f5-exchange07-dg.pdf

Renewing the Certificate in Client Access Servers

To Renew new certificate in Exchange servers we need to remove the existing the certificate and import new certificate.

1.      Open Exchange Management Shell buy doing run as administrator

2.      Type Get-ExchangeCertificate |fl| out-file –filepath c:\certs.txt

3.      C:\certs.txt will have the details of the current certificate, need to make a note of “Thumprint” of mail.domain.com

4.      Type Remove-ExchangeCertificate  –thumprint <thumbprint>

5.      Confirm to remove the certificate

6.      Import-ExchangeCertificate –path “Certificatepath” –FriendlyName “mail.domain.com”

7.      Enable-Exchange Certificate –Thumbprint  <thumbprint> -Service IIS

8.      Enable-Exchange Certificate –Thumbprint  <thumbprint> -Service pop

9.      Enable-Exchange Certificate –Thumbprint  <thumbprint> -Service imap

10.  Get-ExchangeCertificate  | fl to display new certificate details