Exchnage/Outlook Certificate Warning

Posted on 2011-11-01
Last Modified: 2012-05-12
I am looking for a solution to the following problem. I have a client that is running Exchange 2007 with Outlook 2003 mail clients. They have an internal Active directory domain with a domain name of I am in the process of upgrading the Outlook client to Outlook 2010. “When launching the client I get the pop up message “The name of the server does not match the certificate”. When I look at the SAN Cert for the Exchange server I noticed that the e-mail server FQDN is not included the SAN certificate. To get rid of the popup box I need to add the FQDN of the internal Exchange server to SAN Cert, correct? Being that their internal domain name is, can I add a .int to the SAN Cert now that they have created the new international domain? Is there a way to get rid of the certificate error if the FQDN cannot be added?
Question by:Loffler_Paul
    LVL 9

    Accepted Solution

    Yes you could add the internal FQDN by recreating your SAN cert if you were using an internal CA. Or puchase a new cert with the internal names in it.

    The easiest way is to create a Split DNS
    - Create an internal DNS zone with the same name as the one showing in your existing certificate (your external domain) and pointing it to your local IP address of exchange
    You will also have to change the internal URLs of Exchange virtual directories following this KB:
    LVL 24

    Expert Comment

    You dont need server fqdn in your SAN cert. You need to configure your autodiscover record and include it in the certificate.

    Check and
    LVL 8

    Expert Comment

    Yes as sirakov says follow that article 940726 to resolve this issue

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Maximize Your Threat Intelligence Reporting

    Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

    Set up iPhone and iPad email signatures to always send in high-quality HTML with this step-by step guide.
    Easy CSR creation in Exchange 2007,2010 and 2013
    In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…
    The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…

    761 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    8 Experts available now in Live!

    Get 1:1 Help Now