Robc0918
asked on
Exchange Autodiscover SSL error for Outlook anywhere
This issue pertains to Autodiscover and Exchange 2010.
We have a single name certificate ( not a UCC) and I setup an SRV record in our public DNS zone to point to our server (mail.domain.com). But the SSL errors persist.
Error specifies that the name
autodiscover.domain.com does not match the name on the certificate.
Our certificate is set as mail.domain.com
This error only occurs for outlook anywhere ( external users using Outlook )
How do I stop Outlook from throwing this error all the time? www.testexchangeconnectivity.com passes our test for the SRV record and SSL certificate.
Also I noticed we have a wildcard record in our DNS Zone. I read a one line statement in another guide that Autodiscover does not like a wildcard record being set in the public DNS zone. Could this be the cause?
If I switch to an A record setup or CNAME setup we will need a UCC certificate correct?
We have a single name certificate ( not a UCC) and I setup an SRV record in our public DNS zone to point to our server (mail.domain.com). But the SSL errors persist.
Error specifies that the name
autodiscover.domain.com does not match the name on the certificate.
Our certificate is set as mail.domain.com
This error only occurs for outlook anywhere ( external users using Outlook )
How do I stop Outlook from throwing this error all the time? www.testexchangeconnectivity.com passes our test for the SRV record and SSL certificate.
Also I noticed we have a wildcard record in our DNS Zone. I read a one line statement in another guide that Autodiscover does not like a wildcard record being set in the public DNS zone. Could this be the cause?
If I switch to an A record setup or CNAME setup we will need a UCC certificate correct?
There are alternatives to the autodiscover sub domain. You might want to look into using Autodiscover.xml
http://www.more2know.nl/2010/05/18/exchange-autodiscover-and-multiple-domains/
http://www.more2know.nl/2010/05/18/exchange-autodiscover-and-multiple-domains/
ASKER CERTIFIED SOLUTION
membership
Create a free account to see this answer
Signing up is free and takes 30 seconds. No credit card required.
You need to remove that - SRV records can only be used IF autodiscover.example.com doesn't resolve.
Simon.