Solved

Server's certificate chain has expired or is not yet valid

Posted on 2009-04-06
8
1,299 Views
Last Modified: 2012-05-06
I updated our SSL Cert for our Exchange 2003 server back in January. I believe the current certificate was due to expire yesterday (April 5th, 2009). As of this morning, I am receiving the following message on Entourage clients which have been configured with the option "This LDAP server requires a secure conection(SSL)". I do not encounter certificate errors when I connect to the Exchange server via OWA. I have verified on my exchange server that the current certificate installed for the 'Default Web Site' is valid, it expires on April 5th, 2011. Is there perhaps another location in which I missed updating the cert? Any info would be greatly appreciated. I am attaching a screen cap of the error message which Entourage is producing.
entourage-secure-error.jpg
0
Comment
Question by:sgs521
  • 5
  • 2
8 Comments
 

Expert Comment

by:adhodgson
ID: 24081096
Hi,

How is this client connecting to the server?  If POP/IMAP, have you made sure the new certificate is installed on those services?

Thanks.
Andrew.
0
 

Author Comment

by:sgs521
ID: 24081134
The client connects as an exchange client, which in my limited understanding of how Entourage actually talks to exchange, I think is over http. There's a configuration option in the account setup that specifies the account is on exchange, then I have to enter both the exchange server and ldap server, which is the same server address. We don't have anyone who is using pop, smtp or imap directly from the email client in our environment.
0
 
LVL 53

Expert Comment

by:strung
ID: 24081306
0
 

Author Comment

by:sgs521
ID: 24081856
Thanks strung, the first link http://www.askdavetaylor.com/install_root_certificate_with_microsoft_entourage.html seemed to fix this. Just really odd that it had been working before this when we'd never installed the cert client side. Going to do more testing across other workstations before I accept as solution, but it looks like that may be the one.
0
Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
LVL 53

Expert Comment

by:strung
ID: 24082230
Glad to be of help

0
 

Author Comment

by:sgs521
ID: 24087753
An update, I returned to the office this morning, booted up my laptop, launched Entourage and received the error again. So it looks like perhaps installing the cert client side only temporarily fixed until reboot. I'm thinking there's still something I've missed when updating the secure cert on the exchange server. The only way to repeatedly duplicate the issue is by turning on the "this ldap server requires a secure connection" option under account settings in Entourage. Is there another location that the certificate needs to be installed within Active Directory to secure it's ldap communication?
0
 

Author Comment

by:sgs521
ID: 24087764
Also as an update, on the configuration of the exchange server, this was put in place prior to my arrival, but it was configured with AD and Exchange on the same server.
0
 

Accepted Solution

by:
sgs521 earned 0 total points
ID: 24132512
Corrected this issue by removing and re-adding the certificate, rebooted the server. 5 days now and no further incidents of the ssl error client side.
0

Featured Post

Will my email signature work in Office 365?

You've built an email signature using raw HTML code in Office 365, but you can't review how it looks with Transport Rules. So you have to test it over and over again before it can be used. Isn't this a bit of a waste of your time? Wouldn't a WYSIWYG editor make it a lot easier?

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Exchange server is not supported in any cloud-hosted platform (other than Azure with Azure Premium Storage).
Local Continuous Replication is a cost effective and quick way of backing up Exchange server data. The following article describes the steps required to configure Local Continuous Replication. Also, the article tells you how to restore from a backup…
In this video we show how to create an Accepted Domain in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Ac…
Users will learn how resize a batch of photos from a single command in Photoshop via Photoshop's Image Processor. Open up an Image you'd like to resize in Adobe Photoshop: Adjust the image size according to your preferences. Image > Adjustments > …

919 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now