• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 83
  • Last Modified:

Outlook and Certificate error

Hi Experts,
I have renewed a certificate but still have this message:

"The name on the security certificate is invalid or does not match the name of the site"

See also the picture.
0
Eprs_Admin
Asked:
Eprs_Admin
2 Solutions
 
Eprs_AdminSystem ArchitectAuthor Commented:
the pic is here
cert-error.JPG
0
 
David Paris VicenteSystems and Comunications Administrator Commented:
It seems that you are using a certificate for a local address MAIL01.xxxxxxx.local.

When you open the properties of the certificate what is the SAN name?
Are using the same certificate for the internal and external connections?

You could issue the following cmdlet in EMS to get the certificates list:
Get-ExchangeCertificate | FL

Open in new window


 You should also check the URL for the internal and external AutodiscoverVirtualDirectory.

By the way what is the exchange version?

Let us know.
0
 
Andy MIT Systems ManagerCommented:
Also make sure you have re-assigned the exchange services to the new certificate within Exchange (depending on Exchange version this can be done in GUI or MS)
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
Eprs_AdminSystem ArchitectAuthor Commented:
It is exchange version 2007
0
 
Eprs_AdminSystem ArchitectAuthor Commented:
where to check the autodiscover link ?
0
 
Eprs_AdminSystem ArchitectAuthor Commented:
The SAN name , is it the DNS-NAMES.......
0
 
David Paris VicenteSystems and Comunications Administrator Commented:
You must see the certificate properties on the error message.
When you open the certificate, the SAN names is written on the first properties window.

To issue the cmdlet you must open the Exchange Management Shell and issue the command posted above.
0
 
Eprs_AdminSystem ArchitectAuthor Commented:
I have 3 SAN names:

mail.domain.info
domain.info
autodiscover.domain.info
0
 
Eprs_AdminSystem ArchitectAuthor Commented:
how to check the autodiscover function ?
0
 
David Paris VicenteSystems and Comunications Administrator Commented:
Open Outlook.
In your down right corner, you will see and Outlook Icon, execute ctrl + right click in your mouse on top of the Icon.
Choose to test email Autoconfiguration, insert your email address , your password and check the Use Autodiscover, un-select  the other options.

Hit test and show us your result.
0
 
Simon Butler (Sembee)ConsultantCommented:
You need to change the configuration of Exchange to use the external host name internally.
This is because you can no longer have internal names on a public trusted SSL certificate.
This is easily done. http://semb.ee/hostnames2007

Basically setup a split DNS system so the external name resolves internally, then change all of the host names to match.

Simon.
0
 
Eprs_AdminSystem ArchitectAuthor Commented:
ok I will go through it
0
 
Seth SimmonsSr. Systems AdministratorCommented:
I've requested that this question be closed as follows:

Accepted answer: 500 points for Simon Butler (Sembee)'s comment #a40224696

for the following reason:

This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
0

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now