Event ID 12016

Posted on 2008-10-28
Last Modified: 2013-11-30
Hi Experts

I have read this thread and have a relates question.
I am getting lots of Event ID's 12014, 12015 and 12016

I have tried the Enable-ExchangeCertificate command but get the following error message
WARNING: This certificate will not be used for external TLS connections with a FQDN of because the CA-signed cerificate with the thumbprint 'C80BB0395FF0E4D4258F689B700741C83BFACB' takes precedence. The following connectors match that FQDN: Default MYSERVER, Client MYSERVER

The certificate installed with that thumbprint is for IMAP, POP and IIS services and is still valid. The certificate which has expired was for the SMTP service.

Question by:alibongo1970
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
LVL 31

Expert Comment

ID: 22833609
You should have added the SMTP tag to that command in your case.  This will likely clear up all 3 errors.

Author Comment

ID: 22893675
I have tried using the SMTP command

Enable-ExchangeCertificate -Thumbprint 5E7207604F9B0A1D00FE63 -Services "SMTP"

I am getting the following error

This certificate will not be used for external TLS connections with an FQDN of '' because the CA-signed certificate with thumbprint 'C808BB039FFF04' takes precedence. The following connectores match that FQDN: Default myserver, Client  myserver

We have a certificate for IMAP, POP and IIS connections which is the certificate which is taking precedence. We do not have an Edge Transport server but we are using Clearswift Mailsweeper as a Smarthost for external e-mail connections. Do we need to have the certificate for SMTP at all

LVL 31

Accepted Solution

Paranormastic earned 500 total points
ID: 22894630
If you want your mail to be encrypted while being sent, yes you need a cert.  Is it possible to use the other cert (the one that is being used for IMAP, POP, etc.) for SMTP as well?  I would think that this should be the one that you want to use anyways...?  I forget offhand if you can just run it with 'SMTP' include or if you need to re-specify everything 'SMTP,POP,etc." - i would try with each thing you want to use for first and if it errs then try just SMTP.

Featured Post

PeopleSoft Has Never Been Easier

PeopleSoft Adoption Made Smooth & Simple!

On-The-Job Training Is made Intuitive & Easy With WalkMe's On-Screen Guidance Tool.  Claim Your Free WalkMe Account Now

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Since pre-biblical times, humans have sought ways to keep secrets, and share the secrets selectively.  This article explores the ways PHP can be used to hide and encrypt information.
This article explains how to install and use the NTBackup utility that comes with Windows Server.
how to add IIS SMTP to handle application/Scanner relays into office 365.
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit If you want to manage em…

739 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question