?
Solved

microsoft exchange 2007 security alert error on outlook open the name on the security certificate is invalid or does not match the name of the site

Posted on 2014-02-18
4
Medium Priority
?
917 Views
Last Modified: 2014-02-24
hello all- in an attempt to upgrade an ssl certificate on one of our exchange servers, it seems something wrong has been done and now we are all receiving the following alert when we open outlook
a Security Alert popup appears with the FQDN of my exchange server and there is a Check mark for the first 2 items (1) the security certificate is from a trusted certifying authority and (2) the security certificate date is valid but a red X for the last item which states "The name on the security certificate is invalid or does not match the name of the site."
Do you want to Proceed?
if i hit yes, i get the same error one more time and can hit yes to get rid of it, but i still get this error every time i open outlook
the following commands were run on the exchange server to "upgrade" the certificate
import-exchangecertificate -path c:\certificate.txt
enable-exchangecertificate -services SMTP (enter thumbprint)
enable-exchangecertificate -services IIS (enter thumbprint)

im sure this overwrote an existing exchange cert and im not sure why this was done this way, but, i wasnt the tech that handled it, i am just trying to clean up the mess!
0
Comment
Question by:jsctechy
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 23

Expert Comment

by:Suliman Abu Kharroub
ID: 39867867
On the top of the wraning message that you get in outlook, you will find a neme FQDN. does this name indluded in the cert ?   you can check by open the certificate and check issued to field .

Is it a SAN certificate or Single name?
0
 
LVL 1

Author Comment

by:jsctechy
ID: 39868194
its a single name
and the FQDN wasnt included in the cert... the cert was for our outlook web access so its our internet facing address
0
 
LVL 23

Accepted Solution

by:
Suliman Abu Kharroub earned 1000 total points
ID: 39868912
Check this out, how to change exchange internal and external virtual directories to match the name in SSL cert:
http://social.technet.microsoft.com/wiki/contents/articles/5163.managing-exchange-2010-externalinternal-url-s-via-powershell.aspx
0
 
LVL 63

Assisted Solution

by:Simon Butler (Sembee)
Simon Butler (Sembee) earned 1000 total points
ID: 39870897
If it is a single name certificate then you need to setup a split dns solution, so the external name resolves internally http://semb.ee/splitdns and then configure Exchange to use the single host name. http://semb.ee/e2007singlessl

That will resolve the issue for both internal and external traffic.

Simon.
0

Featured Post

Office 365 Training for Admins - 7 Day Trial

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In-place Upgrading Dirsync to Azure AD Connect
In this article I discuss my selections of the Top Four free Outlook OST File Viewers available. Open, view and read even damaged OST files by using these tools. They all provide a clear preview of all data such as emails, notes, tasks, calendars, e…
Many of my clients call in with monstrous Gmail overloading issues with Outlook. A quick tip is to turn off the All Mail and Important folders from synching. Here is a quick video I made to show you how to turn off these and other folders in Gmail s…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…
Suggested Courses
Course of the Month7 days, 19 hours left to enroll

765 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question