Error opening public folders in exchange - because SSL certificates used external domain name

Posted on 2009-02-20
Last Modified: 2012-05-06
When I try to open public folders in Exchange System Manager I get the error:  token supplied to the functinon is invalid - ID no 80090308.  I know it is because the SSL certificate is using the external domain name and not the internal name.  I've seen solutions about turning off the SSL but that is out of the question. I need to keep our secure email access/folder access.  Can someone tell me how to correct this problem.  I need to delete some old spam folders that a previously used package had created.  
Question by:cindyfiller
    LVL 65

    Expert Comment

    You have made a common error.
    You are confusing turning off require SSL with turning off SSL completely.
    There is no way to turn off SSL. If you don't want SSL on a server then you have to remove the certificate.

    What you need to do is remove the setting that requires SSL on the virtual directory. If you only have port 443 open to the internet then you can remove the require SSL option from the entire site. SSL will still work correctly.


    Author Comment

    I figured I was confused.  Two followup questions - how do I tell if I only have port 443 open?  And I assume the steps in the following article will fix the problem:

    Author Comment

    I'm in IIS and for default web site, I see port 80 and ssl port 443.  I see other ports for administration and sharepoint administration.  I assume you wanted to know of some other ssl port was open?  Was this the only place I need to check?
    LVL 65

    Accepted Solution

    Port 443 is something to check on your firewall. You cannot stop Exchange using port 80 internally, it makes internal calls on http://server/ using port 80.

    The KB article is exactly what you need to do. If you find it doesn't work afterwards despite that, restart the web services on the server. (IIS, Web Publishing, HTTPS etc).


    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Highfive + Dolby Voice = No More Audio Complaints!

    Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

    Easy CSR creation in Exchange 2007,2010 and 2013
    Use these top 10 tips to master the art of email signature design. Create an email signature design that will easily wow recipients, promote your brand and highlight your professionalism.
    In this video we show how to create a Distribution Group in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >>…
    how to add IIS SMTP to handle application/Scanner relays into office 365.

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    22 Experts available now in Live!

    Get 1:1 Help Now