Link to home
Start Free TrialLog in
Avatar of rmegni
rmegni

asked on

Exchange Server Certificate Error SBS 2011

The certificate expired, A new self signed certificate was created, but users get the following error in outlook when connecting to Exchange.

The certificate error is " The name of the security certificate is invalid or does not match the name of the site"
Avatar of valmatic
valmatic
Flag of United States of America image

Avatar of rmegni
rmegni

ASKER

Can this error not be remedied using a self signed certificate?
depends are you using autodiscover to setup the connection, or are you using outlook anywhere? If so i would get a real cert you will have 0 headaches. They aren't that much for the time you will waste screwing with these self signed.
Use the SBS Manager to fix this.

Goto the network tab, then run the trusted certificate wizard to generate either a self signed (wont work on iphone/ipad outside of the network) or to generate a request to buy a trusted one. I use cheapssl.com as they are loads cheaper than godaddy.
Avatar of rmegni

ASKER

OK will look at that
Avatar of rmegni

ASKER

So we imported the new bought certificate, but it still gives the same error when people connect to outlook, is there something we are missing?
ASKER CERTIFIED SOLUTION
Avatar of donnk
donnk

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of rmegni

ASKER

Ok, for example

Our certificate is
remote.contoso.com, the server name in internet domain name is contoso.com

In our certificate we had these names entered
remote.contoso.com
owa.contoso.com
autodiscover.contoso.com
mail.contoso.com

Autodiscover and owa are being used.
"remote.contoso.com, the server name in internet domain name is contoso.com"

you mean that both are remote.contoso.com right as you cant have a blank entry for name?

You don't need all those other entries, for example owa is remote.contoso.com/owa

just to be sure your problem is the trusted cert you have used via the wizard isnt showing up when you goto remote.contoso.com. If its not what is if any ?
Avatar of rmegni

ASKER

ok so when we go to remote.contoso.com the server comes up to a remote login page. The actually IIS page is at mail.contoso.com, so that would be the correct name for the cert then?
Avatar of rmegni

ASKER

Ok so the internet domain name in the box is contoso.com thats it theres no remote infront of it in internet domain name field