Sid_F
asked on
Exchange 2007 certificate alert on some client machines
Some client machines receive an error that the site should not be trusted. The name on the site is my exchange 2007 HUB server internal name. All other clients work fine its only a small number. I am thinking this must be client side. date and time are correct on clients.
ASKER
If there was an issue with the cert I am wondering why I am not seeing it for all clients.
The cert is third party. When I click on the prompt and view the cert everything looks fine in the cert. It does not expire for another few months.
The cert is third party. When I click on the prompt and view the cert everything looks fine in the cert. It does not expire for another few months.
On one of the clients where the certificate is not trusted do this.
Open the cert and look at the certification path tab.
Copy each of the certificates in the path to a .cer file
Open mmc.exe on the client
Add remove snap-in
Certificates
Local Machine
Go to the Trusted Root Certification authorities and expand -
Right click on the certificates folder and import
Navigate to the .cer file you saved from above that was at the "top" of the certification path.
go through the wizard until you finish.
Now go to Intermediate Certification Authorities and repeat the steps above for the certificate(s) that you saved below the root certificate you just imported.
Once those are imported try loading again you should not see the error anymore.
If this works let me know, we can then proceed to install the certs remotely on the other affected machines.
Open the cert and look at the certification path tab.
Copy each of the certificates in the path to a .cer file
Open mmc.exe on the client
Add remove snap-in
Certificates
Local Machine
Go to the Trusted Root Certification authorities and expand -
Right click on the certificates folder and import
Navigate to the .cer file you saved from above that was at the "top" of the certification path.
go through the wizard until you finish.
Now go to Intermediate Certification Authorities and repeat the steps above for the certificate(s) that you saved below the root certificate you just imported.
Once those are imported try loading again you should not see the error anymore.
If this works let me know, we can then proceed to install the certs remotely on the other affected machines.
ASKER
I don't follow as you mentioned to import the certificate a few lines in but you don't mention what certificate or where I get the certificate from.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Resolved
What your exchange certificate internal or third party like godaddy, geotrust.