Solved

microsoft exchange 2007 security alert error on outlook open the name on the security certificate is invalid or does not match the name of the site

Posted on 2014-02-18
4
887 Views
Last Modified: 2014-02-24
hello all- in an attempt to upgrade an ssl certificate on one of our exchange servers, it seems something wrong has been done and now we are all receiving the following alert when we open outlook
a Security Alert popup appears with the FQDN of my exchange server and there is a Check mark for the first 2 items (1) the security certificate is from a trusted certifying authority and (2) the security certificate date is valid but a red X for the last item which states "The name on the security certificate is invalid or does not match the name of the site."
Do you want to Proceed?
if i hit yes, i get the same error one more time and can hit yes to get rid of it, but i still get this error every time i open outlook
the following commands were run on the exchange server to "upgrade" the certificate
import-exchangecertificate -path c:\certificate.txt
enable-exchangecertificate -services SMTP (enter thumbprint)
enable-exchangecertificate -services IIS (enter thumbprint)

im sure this overwrote an existing exchange cert and im not sure why this was done this way, but, i wasnt the tech that handled it, i am just trying to clean up the mess!
0
Comment
Question by:jsctechy
  • 2
4 Comments
 
LVL 23

Expert Comment

by:Suliman Abu Kharroub
ID: 39867867
On the top of the wraning message that you get in outlook, you will find a neme FQDN. does this name indluded in the cert ?   you can check by open the certificate and check issued to field .

Is it a SAN certificate or Single name?
0
 
LVL 1

Author Comment

by:jsctechy
ID: 39868194
its a single name
and the FQDN wasnt included in the cert... the cert was for our outlook web access so its our internet facing address
0
 
LVL 23

Accepted Solution

by:
Suliman Abu Kharroub earned 250 total points
ID: 39868912
Check this out, how to change exchange internal and external virtual directories to match the name in SSL cert:
http://social.technet.microsoft.com/wiki/contents/articles/5163.managing-exchange-2010-externalinternal-url-s-via-powershell.aspx
0
 
LVL 63

Assisted Solution

by:Simon Butler (Sembee)
Simon Butler (Sembee) earned 250 total points
ID: 39870897
If it is a single name certificate then you need to setup a split dns solution, so the external name resolves internally http://semb.ee/splitdns and then configure Exchange to use the single host name. http://semb.ee/e2007singlessl

That will resolve the issue for both internal and external traffic.

Simon.
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Sometimes Outlook might have problems sending a message. There may be various causes- corrupted PST, AV scanner etc. The message, instead of going to the Sent Items folder, sits in the Outbox indefinitely. To remove it you can use a free tool cal…
Local Continuous Replication is a cost effective and quick way of backing up Exchange server data. The following article describes the steps required to configure Local Continuous Replication. Also, the article tells you how to restore from a backup…
In this video we show how to create a Resource Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: Navigate to the Recipients >> Resources tab.: "Recipients" is our default selection …
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now