Link to home
Create AccountLog in
Avatar of limmontreefree
limmontreefreeFlag for Spain

asked on

which fields are neccesary in a certificate for Exchange

Hello I need to know which fields are neccesary in the certificate's subject

Full DN, comun name, ...

thanks
SOLUTION
Avatar of Will Szymkowski
Will Szymkowski
Flag of Canada image

Link to home
membership
Create a free account to see this answer
Signing up is free and takes 30 seconds. No credit card required.
See answer
SOLUTION
Link to home
membership
Create a free account to see this answer
Signing up is free and takes 30 seconds. No credit card required.
SOLUTION
Link to home
membership
Create a free account to see this answer
Signing up is free and takes 30 seconds. No credit card required.
SOLUTION
Link to home
membership
Create a free account to see this answer
Signing up is free and takes 30 seconds. No credit card required.
Avatar of limmontreefree

ASKER

Well I build the certificate and when I try it with testexchangeconnectivity.com I get this result.

I used my internal CA named OTHERDOMAIN.local (not ados.biz)
Testing the connectivity RPC / HTTP.
   Error in testing RPC / HTTP.
 
  Test Steps
 
  Attempting to resolve the host name in DNS posta.ados.biz.
   Resolved hostname correctly.
 
  additional Details
 
 

  Testing TCP port 443 on host posta.ados.biz to ensure listening or open.
   The port was opened successfully.

  Testing the SSL certificate to make sure it is valid.
   The SSL certificate did not exceed one or more certificate validation checks.
 
  Test Steps
 
  Connectivity Analyzer Microsoft is attempting to obtain the SSL certificate from remote server on port 443 posta.ados.biz.
   Connectivity Analyzer Microsoft obtained successfully remote SSL certificate.
 
  additional Details
 
 

  Validating the certificate name.
   It was successfully validated the certificate name.
 
  additional Details
 
 

  It is validating the trusted certificate.
   Validation Error trusted certificate.
 
  Test Steps
 
  Connectivity Analyzer Microsoft is trying to build certificate chains for certificate CN = ¿¿ados.biz.
   Could not build a certificate chain for the certificate.
 
  additional Details
   Failed to generate the certificate chain. Perhaps missing required intermediate certificates
In the document I put some screenshot with certificate data.
CERTIFICATE.docx
Did you add the CA as a trusted certificate in the System?
yes, but in the certificate as you can see I set:

emitted from: ZUBITEK (my CA)
emitted to: serEXCH.zubitek.local

And the error talk about " Failed to generate the certificate chain. Perhaps missing required intermediate certificates " 

Maybe,
 I need an intermediate certificate to serEXCH.zubitek.local

OR,
 I have to put in the subject name ZUBITEK ?

Thanks
certificate-from-to.jpg
SOLUTION
Link to home
membership
Create a free account to see this answer
Signing up is free and takes 30 seconds. No credit card required.
yes understand.

Mi problem is that when I try to connect a new  mail profile to Exchange many times I get the error:

" the Outlook conncection must be online..."

Another expert told me that If I get a certificate error with testexchangeconnectivity.com there was the problem.

I think the certificate is correct but I don't know where to look for to solve my problem.

Thanks
SOLUTION
Link to home
membership
Create a free account to see this answer
Signing up is free and takes 30 seconds. No credit card required.
Yes I know but the client uses more certicate for intranet ...OtherWise I think It  must be running well.

And of course I have installed the CA certificate as trusted root authority.

Thanks
Sorry i use my len Ca
ASKER CERTIFIED SOLUTION
Link to home
membership
Create a free account to see this answer
Signing up is free and takes 30 seconds. No credit card required.
Thanks every body