Link to home
Start Free TrialLog in
Avatar of it_proffen
it_proffenFlag for Norway

asked on

Certificate security warning in Outlook after migrating from SBS 2003 to SBS 2011

Hi,

We have a internal domain called "company.local" and a public domain called "company.com".  The public domain is managed by an ISP and is managing MX records pointing to our public IP address for the SMTP server.
 
After migrating from SBS 2003 to SBS 2011 we get Certificate Security warnings when Outlook is started. The presented certificate seems to be a trusted certificate published for the public domain name. We have tries installing the certificate but the security warning keep coming back.

During SBS 2011 migration we used the "Configure the Internet address" wizard to configure the domain name. We then entered the public domain "company.com". Is this correct or should we have used the "company.local" instead?

We are able to receive/send email and everything seems to work fine except the certificate security warnings popping up in Oulook.

We have not yet installed a SSL certificate from VeriSign/DigiCert on the SBS 2011 server.

How can we get rid of the certificate security warnings? Do we have to reconfigure the Internet Address from the public domain name to the internal domain name?

ASKER CERTIFIED SOLUTION
Avatar of Praveen Balan
Praveen Balan
Flag of India image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of it_proffen

ASKER

The solution was to install a SAN certificate and use Exchange management shell to configure the internalurl and externalurls to match the names in the certificate.
Avatar of Member_2_4984608
Member_2_4984608

Glad you got it fixed.  As a footnote, it can be made to work using a basic SSL certificate, not a SAN cert, but it is a bit of a fudge, and not supported.