Event ID 12016

Posted on 2008-10-28
Last Modified: 2013-11-30
Hi Experts

I have read this thread and have a relates question.
I am getting lots of Event ID's 12014, 12015 and 12016

I have tried the Enable-ExchangeCertificate command but get the following error message
WARNING: This certificate will not be used for external TLS connections with a FQDN of because the CA-signed cerificate with the thumbprint 'C80BB0395FF0E4D4258F689B700741C83BFACB' takes precedence. The following connectors match that FQDN: Default MYSERVER, Client MYSERVER

The certificate installed with that thumbprint is for IMAP, POP and IIS services and is still valid. The certificate which has expired was for the SMTP service.

Question by:alibongo1970
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
LVL 31

Expert Comment

ID: 22833609
You should have added the SMTP tag to that command in your case.  This will likely clear up all 3 errors.

Author Comment

ID: 22893675
I have tried using the SMTP command

Enable-ExchangeCertificate -Thumbprint 5E7207604F9B0A1D00FE63 -Services "SMTP"

I am getting the following error

This certificate will not be used for external TLS connections with an FQDN of '' because the CA-signed certificate with thumbprint 'C808BB039FFF04' takes precedence. The following connectores match that FQDN: Default myserver, Client  myserver

We have a certificate for IMAP, POP and IIS connections which is the certificate which is taking precedence. We do not have an Edge Transport server but we are using Clearswift Mailsweeper as a Smarthost for external e-mail connections. Do we need to have the certificate for SMTP at all

LVL 31

Accepted Solution

Paranormastic earned 500 total points
ID: 22894630
If you want your mail to be encrypted while being sent, yes you need a cert.  Is it possible to use the other cert (the one that is being used for IMAP, POP, etc.) for SMTP as well?  I would think that this should be the one that you want to use anyways...?  I forget offhand if you can just run it with 'SMTP' include or if you need to re-specify everything 'SMTP,POP,etc." - i would try with each thing you want to use for first and if it errs then try just SMTP.

Featured Post

What Is Transaction Monitoring and who needs it?

Synthetic Transaction Monitoring that you need for the day to day, which ensures your business website keeps running optimally, and that there is no downtime to impact your customer experience.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Phishing attempts can come in all forms, shapes and sizes. No matter how familiar you think you are with them, always remember to take extra precaution when opening an email with attachments or links.
Unified and professional email signatures help maintain a consistent company brand image to the outside world. This article shows how to create an email signature in Exchange Server 2010 using a transport rule and how to overcome native limitations …
In this video we show how to create an Accepted Domain in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Ac…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

729 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question