asked on

Error SSL certificat prompt in Outlook - Exchange 2010

Hello everyone,

I encountered a problem with SSL certificat.

I've just bought a SAN SSL certificate to protect all my external domain.
But I have now a prompt in my local domain on Outlook saying my certificate is note valide for this URL.
My Outlook client in local are connected to the Exchange server (srv-exchange.masociete.net).
Does I abligatory need to add the name of my Exchange server in the SAN ssl certificate or is there a workeround to use the generated certificate just for OWA, ActiveSync and Outlook Anywhere connection ?

Thanks in advance for your answers.

Damien

M A

you should have these names in your certificate
1. mail.external-domain-name.com
2.autodiscover.domain.com
3.exch-servername.domain.com

Please check this
http://exchangeserverpro.com/configure-an-ssl-certificate-for-exchange-server-2010
http://technet.microsoft.com/en-us/library/dd351044.aspx

dbrenot

ASKER

thanks but the problem is my internal domain name was created with windows NT 4 and is like masociete.net and I've not bought the domain masociete.net.

Could I change the internal URL used by Outlook client to connect to Exchange ?

dbrenot

ASKER

Could I use the command line get-clientaccessserver | fl *uri* and set-clientaccessserver -AutoDiscoverServiceInternalUri to change the URL to point to the URL in my certificate ?

ASKER CERTIFIED SOLUTION

M A

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

setasoujiro

you can do this from the EMC, give exchange 2007/2010.
You should indeed set your internal URLS to the same as the External, and have all the right internal dns records to resolve these.

M A

Change domain.com it to your external domain name.

M A

you make both internal and external the same

M A

Apart from that Why you keep windows NT,
Install windows2003/2008 server and promote it a domain controller and transfer all FSMO roles.

Then change the DNS IP in the exchange server and restart and run command 'setup.com /prepareAD'

Cheers