asked on

Exchange 2007 and Outlook Anywhere Certificate Issue

Hi,
I installed a valid certificate on my Exchange 2007 server. However, Outlook Anywhere still does not work.
At the command shell, it only shows IP.WS for the services running for my domain. I have tried to enable everything with the following command serveral times:
Enable-ExchangeCerificate -thumbprint xxxxxxxxx -Services "SMTP, IMAP, POP, IIS", but it still only show IP.WS as the services running.

I'm not sure if this is the reason that Outlook Anywhere is not working or what.

Any help is greatly appreciated.
thanks,
-Aaron

ASKER CERTIFIED SOLUTION

Mestha

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

rocketmonkey

ASKER

Hi Meshta,
I browsed to: https://mail.DOMAIN.com and got a prompt. I put in my credentials and finally got Error: Access is Denied

Also, I tried the test at https://www.testexchangeconnectivity.com . For active sync, it works. However, for the Microsoft Office Outlook 2007 AutoDiscover Connectivity Test, it fails:
Attempting to test potential AutoDiscover URL https://autodiscover.DOMAIN.com/AutoDiscover/AutoDiscover.xml
Failed testing this potential AutoDiscover URL

The only domains i submitted for my certificate were:
mail.DOMAIN.com
webmail.DOMAIN.com--This is for OWA, but i am still getting a certificate error on the browser
NOT--autodiscover.DOMAIN.com---Should I have added this to the list of domains in the cert?

thanks,
-Aaron

Mestha

Did you buy a SAN/UC certificate?
If so, then you should have had in there

mail.example.com (your preferred name for OWA)
autodiscover.example.com
server.example.local (the server's real name inside)
server (the netbios name)

You should then ensure that both mail.example.com and autodiscover.example.com point to the same IP address.

Autodiscover is key to Outlook 2007/Exchange 2007.

-M

rocketmonkey

ASKER

Actually, it looks like that OWA is working with NO certificate error for:
mail.DOMAIN.com (just now webmail.Domain.com).

However, Outlook Anywhere still does not worl... not sure if it is a certificate error or what.

thanks,
-Aaron

Mestha

Do you have the autodiscover entries in your DNS and on your SSL certificate?
If not then you need to fix that.

-M

rocketmonkey

ASKER

I bought the certificate from ENOM/RapidSSL. I did the initial autogenerated the certificate from:
https://www.digicert.com/easy-csr/exchange2007.htm

I only put in the following domains to initiall gererate the certificate:
mail.Example.com
webmail.Example.com

Do i need to regenerate the certificate with all the names that you said?

thanks,
-Aaron

SOLUTION

Mestha

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial