Solved

SBS2011 random certificate error once a day at midday

Posted on 2012-04-12
5
616 Views
Last Modified: 2012-04-30
I recently did a sbs2003 to sbs2011 migration that went well but had the default remote.domain.com settings in the self cert owa etc. I changed that to reflect the external DNS setup and installed a bout SANS UCC cert which works a treat apart from once a day I get a SSL cert error on the outlook 2010 clients at around luch time, Ive been through all of the settings on the GUI and also changed the ones from the command line. Initially I was getting 2 of these as you opened outlook and these are now sorted but this last one that pops up at lunchtime is eluding me. Any ideas where it might be coming from??
0
Comment
Question by:plug1
  • 3
5 Comments
 
LVL 6

Assisted Solution

by:jaredr80
jaredr80 earned 250 total points
ID: 37839723
How was this cert added to your system? Because this is an SBS install extra care is needed to be taken when installing a cert. All certs should be installed via the SBS console. By failing to do this, issues likes you are observing can and will occur.

My recommendation would be to delete the cert and re-add through SBS console, network|connectivity.

-Jared
0
 
LVL 10

Expert Comment

by:millardjk
ID: 37845585
Check your cert to make sure the correct SAN records are present. The fact that you get these errors on a time-based frequency suggests something else all together, but 99% of the time I see certificate errors related to Exchange 2007 and 2010, it's because the SAN for autodiscover.mydomain.com wasn't properly added.
0
 
LVL 14

Author Comment

by:plug1
ID: 37845782
Jared, your right I didnt use the wizard, I wish I had done and I'll try and re-add it. Millard all records are present and correct.
0
 
LVL 14

Accepted Solution

by:
plug1 earned 0 total points
ID: 37892288
I found the rogue URL entry on the server, unfortunately I cant remember where it was but suffice to say if you go through every element in the EMC you will find them all.
0
 
LVL 14

Author Closing Comment

by:plug1
ID: 37909654
I found the solution myself but accept that jaredr80 is right in what he says.
0

Featured Post

Are end users causing IT problems again?

You’ve taken the time to design and update all your end user’s email signatures, only to find out they’re messing up the HTML, changing the font and ruining the imagery. What can you do to prevent this? Find out how you can save your signatures from end users today.

Join & Write a Comment

Suggested Solutions

Title # Comments Views Activity
Publishing OWA on TMG 2010 2 28
Error 450 sending internal mail 6 19
Exchange 2013 dual delivery 1 11
outlook, MIME 6 11
Easy CSR creation in Exchange 2007,2010 and 2013
Not sure what the best email signature size is? Are you worried about email signature image size? Follow this best practice guide.
In this video we show how to create a Shared Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Sha…
The video tutorial explains the basics of the Exchange server Database Availability groups. The components of this video include: 1. Automatic Failover 2. Failover Clustering 3. Active Manager

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now