Solved

Outlook 2007/2010 Keeps asking for Equifax certificate

Posted on 2010-09-06
6
1,282 Views
Last Modified: 2012-05-10
I have installed a UCC certificate into Exchnage 2010. OWA works fine. when I use Outlook Anywhare connecting to my mail with RPC/HTTP, I keep getting a reuest to trust a certifcate and import. When I do the import it says that it was sucessfull, however the next ime I use outlook anywher the same issues happems. See JPG
1.jpg
2.jpg
0
Comment
Question by:PaulMcDonogh1
  • 3
6 Comments
 
LVL 8

Accepted Solution

by:
pvlier earned 500 total points
ID: 33612282
Hi, as you can see on your posted images the certificate is issued to '*.wadns.net'. When outlook connects to your server is uses the 'autodiscover''  feature to collect information about your server. The autodiscover URL is set to 'autodiscover.smms.ac.za'. This name is not on the certificate (*.wadns.net) and therefore you get an error that the certificate is found but the name is not correct.
If this is an UCC certificate then you should be able to add alternative names to the certificate. Add 'autodiscover.smms.ac.za' to your certificate, install this new certificate and the error will go away.
Otherwise here are other options for your situation (scenario 4):
http://technet.microsoft.com/en-us/library/bb332063(EXCHG.80).aspx
0
 

Author Comment

by:PaulMcDonogh1
ID: 33957451
No luck closing
0
 
LVL 8

Expert Comment

by:pvlier
ID: 33959162
Did you understand what I posted? This is a name-on-the-certificate-problem where the name on the certificate doesn't match the domainname that it is installed on. The proof is in the screenshots.
0
 
LVL 8

Expert Comment

by:pvlier
ID: 33973424
Please let me know if the problem still exists. You have multiple options to fix this problem, depending on the server(s) configuration. You need to make sure the correct name exists on the certificate (you can have a certificate with multiple names) or redirect the autodiscover in dns to the correct server so outlook can see it needs to validate another name. Both options can fix the problem. I would go with the first option and purchase a multi-domainname-certificate (called UCC) because that is the most accepted solution for devices like phones, handhelds, etc
0

Featured Post

What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

So you need a certificate so you can offer SSL encryption.  But which one should you get?  There are so many choices out there! Here is a generic overview of the main types of SSL certificates sold by the majority of commercial Certification Auth…
Imagine a situation that you have installed SSL (http://en.wikipedia.org/wiki/Secure_Sockets_Layer) Certificate on your Cisco ASA (Cisco Adaptive Security Appliance) firewall. Installation of SSL certificate on ASA is an another topic for which you …
Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…
This video demonstrates how to create an example email signature rule for a department in a company using CodeTwo Exchange Rules. The signature will be inserted beneath users' latest emails in conversations and will be displayed in users' Sent Items…

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now