?
Solved

Exchange 2007 Certificate Principal Name issue

Posted on 2009-04-15
4
Medium Priority
?
1,231 Views
Last Modified: 2012-05-06
I have upgraded our Exchange certificate to an multi-domain cert, the origional principal name on the certificate was mail.domain.com. When I created the new certificate i changed the principal name to domain.com with the sub-domains as mail.domain.com, domain.com, autodiscover.domain.com.
Since I changed the CN I have had to change all the clients Exchange proxy settings to msstd:domain.com, from msstd:mail.domain.com. But for some reason the Exchange server is pushing out mail.domain.com and causing these clients connection headaches, is there anyway to change that without causing any further connection problems nor changing the CN?
0
Comment
Question by:progjm
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 65

Accepted Solution

by:
Mestha earned 2000 total points
ID: 24151087
Why did you use domain.com for the common name?
The root domain is usually pointing to the public web site. I never deploy a certificate with the root of the domain for that reason.

Have you changed the FQDN field for Outlook Anywhere?

Run this command (changing EXCHSERVER to your Exchange server's real name)

Get-OutlookProvider -Identity EXCHSERVER | fl

Look at the values for certprinciplename. If that is set to the wrong URL you will need to correct it.

Set-OutlookProvider -identity EXCHSERVER -CertPrincipalname msstd:domain.com

However ideally I would be looking to change the common name on the certificate.

Simon.
0
 
LVL 1

Author Comment

by:progjm
ID: 24151515
There is no data in the CertPrincipalName, server area is blank also.

I had to run this command Get-OutlookProvider  | fl
0
 
LVL 65

Expert Comment

by:Mestha
ID: 24151865
Try setting it as I have outlined, after checking that you have changed the Outlook Anywhere setting.

Simon.
0
 
LVL 1

Author Comment

by:progjm
ID: 24151887
Will do, I may also change the certificate as you stated
0

Featured Post

Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article will help to fix the below errors for MS Exchange Server 2013 I. Certificate error "name on the security certificate is invalid or does not match the name of the site" II. Out of Office not working III. Make Internal URLs and Externa…
A couple of months ago we ran into an issue that necessitated re-creating our Edge Subscriptions. However, when we attempted to execute the command: New-EdgeSubscription -filename C:\NewEdgeSub_01.xml we received an error indicating that the LDAP se…
how to add IIS SMTP to handle application/Scanner relays into office 365.
This video demonstrates how to sync Microsoft Exchange Public Folders with smartphones using CodeTwo Exchange Sync and Exchange ActiveSync. To learn more about CodeTwo Exchange Sync and download the free trial, go to: http://www.codetwo.com/excha…
Suggested Courses

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question