Event ID 12016

Posted on 2008-10-28
Last Modified: 2013-11-30
Hi Experts

I have read this thread and have a relates question.
I am getting lots of Event ID's 12014, 12015 and 12016

I have tried the Enable-ExchangeCertificate command but get the following error message
WARNING: This certificate will not be used for external TLS connections with a FQDN of because the CA-signed cerificate with the thumbprint 'C80BB0395FF0E4D4258F689B700741C83BFACB' takes precedence. The following connectors match that FQDN: Default MYSERVER, Client MYSERVER

The certificate installed with that thumbprint is for IMAP, POP and IIS services and is still valid. The certificate which has expired was for the SMTP service.

Question by:alibongo1970
  • 2
LVL 31

Expert Comment

ID: 22833609
You should have added the SMTP tag to that command in your case.  This will likely clear up all 3 errors.

Author Comment

ID: 22893675
I have tried using the SMTP command

Enable-ExchangeCertificate -Thumbprint 5E7207604F9B0A1D00FE63 -Services "SMTP"

I am getting the following error

This certificate will not be used for external TLS connections with an FQDN of '' because the CA-signed certificate with thumbprint 'C808BB039FFF04' takes precedence. The following connectores match that FQDN: Default myserver, Client  myserver

We have a certificate for IMAP, POP and IIS connections which is the certificate which is taking precedence. We do not have an Edge Transport server but we are using Clearswift Mailsweeper as a Smarthost for external e-mail connections. Do we need to have the certificate for SMTP at all

LVL 31

Accepted Solution

Paranormastic earned 500 total points
ID: 22894630
If you want your mail to be encrypted while being sent, yes you need a cert.  Is it possible to use the other cert (the one that is being used for IMAP, POP, etc.) for SMTP as well?  I would think that this should be the one that you want to use anyways...?  I forget offhand if you can just run it with 'SMTP' include or if you need to re-specify everything 'SMTP,POP,etc." - i would try with each thing you want to use for first and if it errs then try just SMTP.

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Scam emails are a huge burden for many businesses. Spotting one is not always easy. Follow our tips to identify if an email you receive is a scam.
How to resolve IMCEAEX NDRs in Exchange or Exchange Online related to invalid X500 addresses.
In this video we show how to create an Accepted Domain in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Ac…
To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…

820 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question