Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium


Error when trying to Enable Exchange Certificate

Posted on 2008-11-11
Medium Priority
Last Modified: 2012-05-05

Well first I want to give some background for my problem:

I'm setting up a solution with 2 normal AD domains and 1 resource domain. The resource domain has the Exhcange 2007 server and I'm using linked mailboxes so the users in the 2 normal AD's has access to there mailboxes.

Everything works fine except that I recieve following error: 0X8004010F in the sync log at my Outlook 2007 client. This error has something to do with the OAB i think?!

Anyway... This error is showing a warning to the users and we can't have it like this....

I read an article about this problem. The article wanted me to create a certifiacte and distribute it with GPO. There's already a certficate in use for the OWA and ActiveSync (pushmail) that's up and running.

When i create a certifcate like the article says using the "New-ExchangeCertificate" and "Import-ExchangeCertificate" functions in PowerShell. Everything goes ok, and I'm getting the "Thumbprint".

So over to the problem:
When I'm trying to run the "Enable-ExchangeCertificate" i get the following error:

Enable-ExchangeCertificate 488AA83E971CF81724077B4B4D2D2858A4BED749 -Services IIS
Enable-ExchangeCertificate : The certificate with thumbprint 488AA83E971CF81724
077B4B4D2D2858A4BED749 was found but is not valid for use with Exchange Server
(reason: PkixKpServerAuthNotFoundInEnhancedKeyUsage).
At line:1 char:27
+ Enable-ExchangeCertificate  <<<< 488AA83E971CF81724077B4B4D2D2858A4BED749 -Services IIS

This was a lot of infomation..... Hopefully this is enough for you to understand my problem ;)
Question by:karlhw
1 Comment
LVL 33

Accepted Solution

Exchange_Geek earned 2000 total points
ID: 22991026

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Stellar Exchange Toolkit: this 5 in 1 toolkit comes loaded with mega-software tool. Here’s an introduction to tools’ usage and advantages:
In this post, I will showcase the steps for how to create groups in Office 365. Office 365 groups allow for ease of flexibility and collaboration between staff members.
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…
Whether it be Exchange Server Crash Issues, Dirty Shutdown Errors or Failed to mount error, Stellar Phoenix Mailbox Exchange Recovery has always got your back. With the help of its easy to understand user interface and 3 simple steps recovery proced…
Suggested Courses
Course of the Month11 days, 13 hours left to enroll

564 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question