Solved

microsoft exchange 2007 security alert error on outlook open the name on the security certificate is invalid or does not match the name of the site

Posted on 2014-02-18
4
893 Views
Last Modified: 2014-02-24
hello all- in an attempt to upgrade an ssl certificate on one of our exchange servers, it seems something wrong has been done and now we are all receiving the following alert when we open outlook
a Security Alert popup appears with the FQDN of my exchange server and there is a Check mark for the first 2 items (1) the security certificate is from a trusted certifying authority and (2) the security certificate date is valid but a red X for the last item which states "The name on the security certificate is invalid or does not match the name of the site."
Do you want to Proceed?
if i hit yes, i get the same error one more time and can hit yes to get rid of it, but i still get this error every time i open outlook
the following commands were run on the exchange server to "upgrade" the certificate
import-exchangecertificate -path c:\certificate.txt
enable-exchangecertificate -services SMTP (enter thumbprint)
enable-exchangecertificate -services IIS (enter thumbprint)

im sure this overwrote an existing exchange cert and im not sure why this was done this way, but, i wasnt the tech that handled it, i am just trying to clean up the mess!
0
Comment
Question by:jsctechy
  • 2
4 Comments
 
LVL 23

Expert Comment

by:Suliman Abu Kharroub
ID: 39867867
On the top of the wraning message that you get in outlook, you will find a neme FQDN. does this name indluded in the cert ?   you can check by open the certificate and check issued to field .

Is it a SAN certificate or Single name?
0
 
LVL 1

Author Comment

by:jsctechy
ID: 39868194
its a single name
and the FQDN wasnt included in the cert... the cert was for our outlook web access so its our internet facing address
0
 
LVL 23

Accepted Solution

by:
Suliman Abu Kharroub earned 250 total points
ID: 39868912
Check this out, how to change exchange internal and external virtual directories to match the name in SSL cert:
http://social.technet.microsoft.com/wiki/contents/articles/5163.managing-exchange-2010-externalinternal-url-s-via-powershell.aspx
0
 
LVL 63

Assisted Solution

by:Simon Butler (Sembee)
Simon Butler (Sembee) earned 250 total points
ID: 39870897
If it is a single name certificate then you need to setup a split dns solution, so the external name resolves internally http://semb.ee/splitdns and then configure Exchange to use the single host name. http://semb.ee/e2007singlessl

That will resolve the issue for both internal and external traffic.

Simon.
0

Featured Post

Control application downtime with dependency maps

Visualize the interdependencies between application components better with Applications Manager's automated application discovery and dependency mapping feature. Resolve performance issues faster by quickly isolating problematic components.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Is your Office 365 signature not working the way you want it to? Are signature updates taking up too much of your time? Let's run through the most common problems that an IT administrator can encounter when dealing with Office 365 email signatures.
Finding original email is quite difficult due to their duplicates. From this article, you will come to know why multiple duplicates of same emails appear and how to delete duplicate emails from Outlook securely and instantly while vital emails remai…
To show how to generate a certificate request in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Servers >> Certificates‚Ķ
The video tutorial explains the basics of the Exchange server Database Availability groups. The components of this video include: 1. Automatic Failover 2. Failover Clustering 3. Active Manager

932 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now