Solved

Exchange 2010 Certificate Problem

Posted on 2010-08-13
13
395 Views
Last Modified: 2012-05-10
I have purchased a certificate from GlobalSign, which works for owa internal link:
https://exchange1/owa but when the Outlook 2007 Client connects to my exchange 2010 server I get the certificate error that the name on the certificate does not match the name on the site.

I saw this post: http://www.experts-exchange.com/Software/Server_Software/Email_Servers/Exchange/Q_26166895.html

which is the same issue, bit I don't understand what I need to do to get it to work.

Can someone give me a hand please???
0
Comment
Question by:andrewjones1987
13 Comments
 
LVL 20

Accepted Solution

by:
woolnoir earned 500 total points
ID: 33427965
you need to make sure your clients are connecting to the same name i.e https://exchange1.FULLDOMAINNAME.com/owa. The certificate can have an entry for a 'simple name' but otherwise the clients need to connect to the full external name as external clients would.
0
 
LVL 9

Expert Comment

by:Tomas Valenta
ID: 33428008
The certificate is created for FQDN of host. When this certificate is used in web server site the client connect to this site and make some security checks on certificate - validity, trust and if the host you are connected is equal to the host for what was certificate issued.
If you use this server from Internet and from internal site under different hostnames you must make changes in your environment to be able not receive error messages. what name is on your certificate, what name is filled in Outlook in Exchange profile, what is in IIS config ?
0
 
LVL 2

Author Comment

by:andrewjones1987
ID: 33428050
Outlook Client: exchange1.ad.domain.org.uk
IIS: https://exchange1/owa   or   https://exchange1.ad.domain.org.uk

Certificate:
Contains - autodiscovery.domain.org.uk
                 mail.domain.org.uk
                 webmail.domain.org.uk
                 exchange1
                 localhost

I Understand about the certificate not containing the exchange1.ad.domain.org.uk, but how do I configure exchange clients (Outlook 2007) to use just exchange1 or even mail.domain.org.uk??? same as external???
0
 
LVL 11

Expert Comment

by:Marc Dekeyser
ID: 33428051
I'll go with woolnoir here, you need to add the external domain name on the certificate as f.e. "mail.contoso.com"
0
 
LVL 20

Expert Comment

by:woolnoir
ID: 33428058
go into the account settings in outlook 2010 and for the server address for the account add the full domain name for the server as you registered in the certificate... i.e mail.domain.org.uk.
0
 
LVL 20

Expert Comment

by:woolnoir
ID: 33428067
the distinction would be ( using my username )

I'd registered mail.woolnoir.org.uk and had a OWA server. My external clients would use https://mail.woolnoir.org.uk and would work fine. My internal clients would use only MAIL in their outlook server settings and it would fail... as MAIL isnt the FQDN in the SSL certificate... it has to be mail.woolnoir.org.uk for the server setting...
0
Too many email signature changes to deal with?

Are you constantly being asked to update your organization's email signatures? Do they take up too much of your time? Wouldn't you love to be able to manage all signatures from one central location, easily design them and deploy them quickly to users. Well, you can!

 
LVL 20

Expert Comment

by:woolnoir
ID: 33428075
Try just changing your outlook from exchange.ad.domain.org.uk to exchange.domain.org.uk.. thats a good first step.
0
 
LVL 2

Author Comment

by:andrewjones1987
ID: 33428110
no, the only thing in outlook that will work is when I type exchange1 and then it adds exchange1.ad.domainname.org.uk (ad.domainname.org.uk is my FQDN)
0
 
LVL 20

Expert Comment

by:woolnoir
ID: 33428128
But you can go into the account settings preferences and changes that manually after you have configured the account ? I know it suggests the details but it shouldn't auto add them ? thats auto discovery happening but it should be manually tweak able ?
0
 
LVL 2

Author Comment

by:andrewjones1987
ID: 33428150
No.....I select Manually configure and when I enter the Server name and my Username, it adds the last bit during the check name process as seen when I go back into the settings.
0
 
LVL 4

Expert Comment

by:Valutus
ID: 33428165
This article explains how to set the internal URL in Exchange 2007 (it also applies to Exchange 2010) http://www.msexchange.org/articles_tutorials/exchange-server-2007/management-administration/configuring-exchange-server-2007-web-services-urls.html

Setting the Internal URL to match your external URL it should resolve the issue.


0
 
LVL 4

Expert Comment

by:DeDeckkerAndy
ID: 33430619
Open exchange mgmt console
server configuration
Client Access
select your server
-click properties, last tab Outlok Anywhere - fill in the external host name mail.domain.org.uk
-click ok

On tab Outlook Web App - click owa and click properties
there --> external url mail.domain.org.uk, click ok
on tab Exchange Activesync - click Microsoft-Server-ActiveSync, click properties
there --> external url mail.domain.org.uk, click ok

Point the external dns from mail.domain.org.uk to the right ip address

that should do the trick
0
 
LVL 20

Expert Comment

by:woolnoir
ID: 33475884
Any luck on this issue ?
0

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Following basic email etiquette rules will help you write a professional email and achieve a good, lasting impression with your contacts.
MS Outlook is a world-class email client application that is mainly used for e-communication globally.  In this article, we will discuss the basic idea about MS Outlook, its advanced features, and types of MS Outlook File formats.
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

895 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now