Certificate Issues after installing SP2

This weekend I installed Service Pack 2 for Exchange 2007 as well as Rollup Update 3.

I no go to run test-outlookwebservice | FL and I notice the following warning message...

Id      : 1005
Type    : Warning
Message : When accessing https://exchange.cft.org/Autodiscover/Autodiscover.xml
           the error "NotTimeValid:A required certificate is not within its val
          idity period when verifying against the current system clock or the t
          imestamp in the signed file.
          " was reported.

Any suggestions on correcting this issue?
bnrtechAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Hilal1924Commented:
I guess this is an internal certificate that you are using on your server. Purchase a Third Party Certificate instead and this error will go away.

Or if you just want to get rid of that error message renew the certificate from your exchange server by using the following procedure.

http://www.exchangepedia.com/blog/2008/01/exchange-server-2007-renewing-self.html

http://msexchangegeek.com/2009/04/24/how-to-renew-a-self-signed-certificate-in-exchange-server-2007/

Cheers,
Hilal

Cert-error.bmp
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
bnrtechAuthor Commented:
Hilal,

Thanks for the tip. Oddly enough I just did this update about a week ago as the interanl certificate expired. I guess it also gets messed up when applying SP2 (?).

Anyhow, I just tried the steps noted and it still appears to produce the same warning message. I am checking again (maybe I missed a step).

Also, I agree with you on a 3rd party certificate. Unfortunately this is for a small, non-profit site and they are not willing to pay for the certificate (even though the cost is minimal in my opinion)
0
bnrtechAuthor Commented:
This was very helpful info. The msexchangegeek.com posting was very helpful. To summarize, steps I did...

(1) Get-ExchangeCertificate | FL

(2) Get-ExchangeCertificate –Thumbprint “[Thumbprint of the certificate]” | New-ExchangeCertificate  

(3) Enable-ExchangeCertificate –Thumbprint [Thumbprint of the certificate] –Service “IMAP,POP,SMTP,IIS”

(4) Get-ExchangeCertificate | FL

(5) Remove-ExchangeCertificate –Thumbprint "ENTER THUMBPRINT VALUE FOR ANY/ALL OLD IDs FOUND IN STEP 4"
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.