Solved

Certificate error in exchange

Posted on 2014-02-15
2
269 Views
Last Modified: 2014-03-04
We have three exchange 2010 servers, and getting error related with ceritificate "The name on security certificate is invalid or does not match the name of the site"

Have verified URL for autodiscover through command Get-ClientAccessServer | fl
And output is three different internal url for ' AutodiscoverInternalServerUri '

Is this error related to different internal Urls. Do we need to keep same internal url for all servers. Kindly advice.
0
Comment
Question by:sanjayambre
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 29

Assisted Solution

by:becraig
becraig earned 250 total points
ID: 39861849
Please take a look at the link below.
It would seem your certificate does not have the internal urls listed in the SAN names.

http://support.microsoft.com/kb/940726


I am not sure of your internal configuration but the above link will help you to identify the values for your exchange urls.
0
 
LVL 63

Accepted Solution

by:
Simon Butler (Sembee) earned 250 total points
ID: 39862859
Are all of the servers in the same site?
If so, then you can use the same value on all servers, and that is what I would encourage you to do.
If the servers are in different AD sites, then you will need a unique URL for each site, which will need to be on the SSL certificate.
Using the real FQDN of the server isn't an option with trusted certificates because you cannot get them added to certificates that expire after November 2015.

Simon.
0

Featured Post

Revamp Your Training Process

Drastically shorten your training time with WalkMe's advanced online training solution that Guides your trainees to action.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Following basic email etiquette rules will help you write a professional email and achieve a good, lasting impression with your contacts.
How to resolve IMCEAEX NDRs in Exchange or Exchange Online related to invalid X500 addresses.
In this video we show how to create an Address List in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Organization >> Ad…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question