8. How should we handle the use of certificates in our Exchange environment?
The Microsoft Exchange team recommends some best practices for Exchange 2010. For example, you should use one certificate for an entire ActiveDirectory site; ideally, the same certificate can be applied to reverse proxies like ISA. The fewer certificates you have, the easier the management. The new Subject Alternative Name (SAN) certificates allow for multiple host names within the certificate. Another important point is to create as few host names as possible -- even as little as three: one for AutoDiscover, one for Outlook Web Acess/OutlookAnywhere, and a legacy host name for coexistence.
Getting to a smooth move
The move to Exchange 2010 will no doubt be exciting, but it doesn't have to be a nightmare. Best practices and advanced planning should make for a smooth move of mailboxes and configuration settings. Obviously you might consider a third-party tool to assist in some cases (I'm a huge fan of Quest software for these types of moves), and you may want to have a consultant or team of consultants guide you through the process.
What are your plans with Exchange 2010? Are you ready to roll out and move forward? What is your method of deployment for your environment?
Follow J. Peter Bruzzese on Twitter at http://twitter.com/JPBruzzese