Exchange 2010 new ssl cert not including *.local server name

Posted on 2014-08-01
Last Modified: 2014-08-01
Since new ssl cert requirements are not allowing the servers local names to be included I have run into a few issues.  I have followed the posts that go through the Exchange Shell and make the following changes for the .local changes:

Set-ClientAccessServer -Identity “server-name” –AutodiscoverServiceInternalUri https://”mx-record name”/autodiscover/autodiscover.xml

Set-WebServicesVirtualDirectory -Identity ““server-name”\EWS (Default Web Site)”-InternalUrl https://”mx-record name”/ews/exchange.asmx

Set-OABVirtualDirectory -Identity ““server-name”\oab (Default Web Site)”-InternalUrl https://”mx-record name”/oab
2.      Open IIS Manager.
3.      Expand the local computer, and then expand Application Pools.
4.      Right-click MSExchangeAutodiscoverAppPool, and then click Recycle.

Since then the clients are getting multiple errors in Outlook.  First is a cert error that initially points to their mx-record name and then they get one that is coming from their firewall...  The next issue is that they can no longer activate the Out of Office assistant from outlook either.  They are getting the server is unavailable..  That started after I completed the above changes...  OOF works from OWA..
Question by:infospecs
LVL 34

Accepted Solution

Seth Simmons earned 500 total points
ID: 40234444
are you using split dns?

Windows - Setting Up Split DNS

in other words, do you have a local dns zone for your external domain pointing to your internal servers so that they can resolve as .com instead of .local internally as to match the certificate and configured exchange URLs?

Author Closing Comment

ID: 40234649
That looks like it fixed it....  Thank You...  I should have thought about that..

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Lotus Notes – formerly IBM Notes – is an email client application, while IBM Domino (earlier Lotus Domino) is an email server. The client possesses a set of features that are even more advanced as compared to that of Outlook. Likewise, IBM Domino is…
Find out what you should include to make the best professional email signature for your organization.
In this video we show how to create a Resource Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: Navigate to the Recipients >> Resources tab.: "Recipients" is our default selection …
In this Micro Video tutorial you will learn the basics about Database Availability Groups and How to configure one using a live Exchange Server Environment. The video tutorial explains the basics of the Exchange server Database Availability grou…

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question