Welcome to the Exchange 2013 Webcast Deployment & Coexistence http://technet.microsoft.com/en-us/library/cc731125(v=WS.10).aspx Exchange 2010 Architecture Hardware Load Balancer Client Access Hub Transport, Unified Messaging Mailbox L7 LB Exchange 2013 Architecture L4 LB AuthN, Proxy, Re-direct Client Access AuthN, Proxy, Re-direct Protocols, API, Biz-logic Assistants, Store, CI Protocols, Assistants, API, Biz-logic Store, CI Mailbox 1. Prepare Install Exchange 2010 SP3 across the ORG Clients autodiscover.contoso.com mail.contoso.com 2 1 Prepare AD with Exchange 2013 CU1 schema Validate existing Client Access using Remote Connectivity Analyzer and test connectivity cmdlets 2. Deploy Exchange 2013 CU1 servers 4 Install both Exchange 2013 MBX and CAS roles E2010 HUB E2010 CAS 3 E2013 CAS Exchange 2010 Servers SP3 SP3 SP3 Intranet site 6 5 E2010 MBX E2013 MBX Internet-facing site – upgrade first 3. Obtain and deploy certificates Obtain and deploy certificates on Exchange 2013 Client Access Servers 4. Switch primary namespace to Exchange 2013 CAS Exchange 2013 fields all traffic, including traffic from Exchange 2010 users Validate using Remote Connectivity Analyzer 5. Move Mailboxes Build out DAG Move Exchange 2010 users to Exchange 2013 MBX 6. Repeat for additional sites 1. Prepare Clients Install Exchange 2007 SP3 + RU10 across the ORG autodiscover.contoso.com mail.contoso.com 3 legacy.contoso.com 2 1 E2007 SP3 CAS E2007 SP3 HUB 4 Prepare AD with Exchange 2013 CU1 schema 2. Deploy Exchange 2013 CU1 servers 5 E2013 CAS Exchange 2007 Servers RU10 RU10 RU10 RU10 Intranet site Install both Exchange 2013 MBX and CAS servers 3. Create legacy namespace Create DNS record to point to legacy Exchange 2007 CAS 4. Obtain and Deploy Certificates Obtain and deploy certificates on Exchange 2013 CAS servers configured with legacy namespace, Exchange 2013 namespace, and autodiscover namespace Deploy certificates on Exchange 2007 CAS 5. Switch primary namespace to Exchange 2013 CAS Validate using Remote Connectivity Analyzer 7 6 E2007 SP3 MBX E2013 MBX Internet-facing site – upgrade first 6. Move mailboxes Build out DAG Move Exchange 2007 users to Exchange 2013 MBX 7. Repeat for additional sites 1. Prepare Install Exchange SP and/or updates across the org Prepare AD with Exchange 2013 CU1 schema and validate Clients autodiscover.contoso.com mail.contoso.com 2. Deploy Exchange 2013 CU1 servers 1 3. Create legacy namespace E2010 or 2007 HUB E2010 or 2007 CAS SP/RU E2010 or 2007 MBX Internet facing site – Upgrade first Exchange 2010 or 2007 Servers SP/RU Intranet site 4. Obtain and deploy certificates 5. Switch primary namespace to Exchange 2013 CAS 6. Move mailboxes 7. Repeat for additional sites Prepare Extend Active Directory Schema for Exchange 2013 CU1 Upgrade the Exchange Organization to Exchange 2013 CU1 Prepare domains for Exchange 2013 CU1 mail enabled objects Validate existing client access using MS Connectivity Analyzer and Test-*connectivity cmdlets in EMS. http://www.exrca.com 1 1. Prepare Clients Install Exchange SP and/or updates across the org autodiscover.contoso.com mail.contoso.com Prepare AD with Exchange 2013 CU1 schema 2. Deploy Deploy Exchange Exchange 2013 2013 servers CU1 servers 2. Install both both E2013 Exchange and CAS servers Install MBX2013 and MBX CAS servers 2 3. Create legacy namespace E2010 or 2007 HUB E2010 or 2007 CAS E2013 CAS Exchange 2010 or 2007 Servers SP/RU SP/RU Intranet site 4. Obtain and deploy certificates 5. Switch primary namespace to Exchange 2013 CAS 6. Move mailboxes 7. Repeat for additional sites E2010 or 2007 MBX E2013 MBX Internet-facing site – upgrade first 2 1 Install − Setup.exe /mode:install /roles:clientaccess − Setup.exe /mode:install /roles:mailbox − Setup.exe /mode:install /roles:ManagementTools Other required parameter - /IAcceptExchangeServerLicenseTerms MBX performs PowerShell commands CAS is proxy only GUI or command line In-place upgrades not supported Updated to reflect Exchange 2013 roles Cannot change roles later on New required parameter for license terms acceptance 1. Prepare Clients Install Exchange SP and/or updates across the org autodiscover.contoso.com mail.contoso.com 3 legacy.contoso.com Prepare AD with Exchange 2013 CU1 schema 2. Deploy Exchange 2013 CU1 servers Install both Exchange 2013 MBX and CAS servers 3. Create legacy namespace E2010 or 2007 HUB E2010 or 2007 CAS E2013 CAS Exchange 2010 or 2007 Servers SP/RU SP/RU Intranet site 4. Obtain and deploy certificates 5. Switch primary namespace to Exchange 2013 CAS 6. Move mailboxes 7. Repeat for additional sites E2010 or 2007 MBX E2013 MBX Internet-facing site – upgrade first Create Legacy Namespace Used to access Exchange 2007 resources during coexistence legacy.contoso.com http://testconnectivity.microsoft.com 3 1 1. Prepare Clients Install Exchange SP and/or updates across the org autodiscover.contoso.com mail.contoso.com legacy.contoso.com Prepare AD with Exchange 2013 CU1 schema 2. Deploy Exchange 2013 CU1 servers Install both Exchange 2013 MBX and CAS servers 3. Create legacy namespace E2010 or 2007 HUB E2010 or 2007 CAS 4 E2013 CAS Exchange 2010 or 2007 Servers SP/RU SP/RU Intranet site 4. Obtain and deploy certificates Obtain and deploy certificates on Exchange 2013 CAS configured with legacy namespace, Exchange 2013 namespace, and Autodiscover namespace Deploy certificates on Exchange 2007 CAS 5. Switch primary namespace to Exchange 2013 CAS E2010 or 2007 MBX E2013 MBX Internet-facing site – upgrade first 6. Move mailboxes 7. Repeat for additional sites 4 1 End-to-end certificate request creation Allows importing of certificate with private key to any CAS in the org First notification shown 30 days prior to expiration Subsequent notifications provided daily Certificates Minimize the number of certificates Minimize number of host names Use split DNS for Exchange host names mail.contoso.com for Exchange connectivity on intranet and Internet mail.contoso.com has different IP addresses in intranet/Internet DNS Don’t list machine host names in certificate host name list Use load-balanced (LB) arrays for intranet and Internet access to servers Use “Subject Alternative Name” (SAN) certificate 4 1 Clients 1. Prepare autodiscover.contoso.com mail.contoso.com legacy.contoso.com Install Exchange SP and/or updates across the org Prepare AD with Exchange 2013 CU1 schema 2. Deploy Exchange 2013 CU1 servers 5 Install both Exchange 2013 MBX and CAS servers 3. Create legacy namespace E2010 or 2007 HUB E2010 or 2007 CAS E2013 CAS Exchange 2010 or 2007 Servers SP/RU SP/RU Intranet site 4. Obtain and deploy certificates Obtain and deploy certificates on Exchange 2013 CAS configured with legacy namespace, Exchange 2013 namespace, and Autodiscover namespace Deploy certificates on Exchange 2007 CAS 5. Switch primary namespace to Exchange 2013 CAS E2010 or 2007 MBX E2013 MBX Internet-facing site – upgrade first Validate using Remote Connectivity Analyzer 6. Move mailboxes 7. Repeat for additional sites https://testconnectivity.microsoft.com/ Exchange 2010 Coexistence OWA mail.contoso.com europe.mail.contoso.com Layer 4 LB E2010 CAS IIS HTTP Proxy E2013 CAS RPC Store Protocol Head DB DB E2010 MBX E2013 MBX Site Boundary Protocol Head Layer 7 LB Protocol Head E2010 CAS RPC Store DB E2010 MBX Cross-Site Proxy Request Cross-Site Redirect Request Exchange 2007 Coexistence OWA legacy.contoso.com mail.contoso.com europe.mail.contoso.com Layer 7 LB Layer 4 LB Layer 7 LB RPC E2007 CAS IIS HTTP Proxy E2013 CAS Store Protocol Head DB DB E2007 MBX E2013 MBX Site Boundary Protocol Head Protocol Head RPC E2007 CAS Store DB E2007MBX Cross-Site Proxy Request Cross-Site Redirect Request Clients mail.contoso.com RPC/HTTP Layer 7 LB Load Balancer RPC/HTTP HTTP PROXY E2007/E2010 CAS E2013 CU1 CAS OA Enabled Client Settings IIS Auth: NTLM OA Enabled Client Auth: Basic IIS Auth: Basic NTLM RPC 1. Enable Outlook Anywhere on all legacy CAS 2. IIS authentication methods E2007/E2010 CAS Disabled OA Enabled Client Settings IIS Auth: NTLM RPC RPC E2007/E2010 MBX HTTP PROXY E2013 CU1 MBX Internet-facing site E2007/E2010 MBX Intranet-facing site IIS Auth must have NTLM enabled on all legacy CAS 3. Client settings Make legacy OA settings the same as 2013 CAS so all clients get the same proxy hostname 4. DNS cutover A low TTL on the existing record the days prior to the cutover is a good idea. Protocol Exchange 2007 user accessing Exchange 2010 namespace Exchange 2007 user accessing Exchange 2013 namespace Exchange 2010 user accessing Exchange 2013 namespace Requires Legacy namespace Legacy namespace No additional namespaces OWA • Same AD site: silent or SSO FBA redirect • Externally facing AD site: manual or silent/SSO Cross-site redirect • Internally facing AD site: proxy Non-silent redirect (not SSO) to CAS 2007 externally facing URL • Proxy to CAS 2010 • Cross-site silent redirect (not SSO), which may redirect to CAS 2010 or CAS 2013 EAS • EAS v12.1+ : Autodiscover & redirect • Older EAS devices: proxy Proxy to MBX 2013 Proxy to CAS 2010 Outlook Anywhere Direct CAS 2010 support Proxy to CAS 2007 Proxy to CAS 2010 Autodiscover Exchange 2010 answers Autodiscover query for 2007 User Exchange 2013 answers Autodiscover query for 2007 User Proxy to CAS 2010 EWS Uses Autodiscover to find CAS 2007 EWS External URL Uses Autodiscover to find CAS 2007 EWS External URL Proxy to CAS 2010 POP/IMAP Proxy Proxy to CAS 2007 Proxy to CAS 2010 OAB Direct CAS 2010 support Proxy to CAS 2007 Proxy to CAS 2010 RPS n/a n/a Proxy to CAS 2010 ECP n/a n/a • Proxy to CAS 2010 • Cross-site redirect, which may redirect to CAS 2010 or CAS 2013 1. Prepare Install Exchange SP and/or updates across the org Clients autodiscover.contoso.com mail.contoso.com legacy.contoso.com Prepare AD with Exchange 2013 CU1 schema 2. Deploy Exchange 2013 CU1 servers Install both Exchange 2013 MBX and CAS servers 3. Create legacy namespace E2010 or 2007 HUB E2010 or 2007 CAS E2013 CAS SP/RU SP/RU Intranet site 5. Switch primary namespace to Exchange 2013 CAS Validate using Remote Connectivity Analyzer 6. Move mailboxes 6 E2010 or 2007 MBX Exchange 2010 or 2007 Servers 4. Obtain and deploy certificates Obtain and deploy certificates on Exchange 2013 CAS configured with legacy namespace, Exchange 2013 namespace, and Autodiscover namespace Deploy certificates on Exchange 2007 CAS E2013 MBX Internet-facing site – upgrade first Build out DAG Move users to Exchange 2013 MBX 7. Repeat for additional sites https://testconnectivity.microsoft.com/ http://blogs.technet.com/b/exchange/archive/2012/11/21/publishing-exchangeserver-2013-using-tmg.aspx