Solved

Microsoft Exchange Self Signed Certificate how to install on local Outlook, security certificate invalid does not match name of site

Posted on 2014-11-23
9
234 Views
Last Modified: 2014-12-01
I recently had to re-install SBS2008 at a client site.  I can't remember how I setup the self-signed certificate authority on the server in order for Outlook to correctly work without the attached screen shot pop-up.  I have tried 6 ways from sunday to install the certificate.  E-mail works, OWA works, I just need this pop up to go away.  I'm hoping someone more versed in Certificate Authority and exchange could help.

thanks,
Ryan
0
Comment
Question by:pjnutt
  • 4
  • 4
9 Comments
 
LVL 18

Expert Comment

by:suriyaehnop
ID: 40460984
0
 
LVL 28

Expert Comment

by:becraig
ID: 40460988
Depending on the size of your organization a gpo could work for you

http://technet.microsoft.com/en-us/library/cc738131%28v=ws.10%29.aspx
0
 

Author Comment

by:pjnutt
ID: 40460992
So, I did this once with one of the certificates.  It installed just like the webpage said it would.  It's almost although I have an "extra" certificate lingering around.  Like I said, exchange is working.  How can I trace back the certificate that's bogus or un-necessary?
0
 

Author Comment

by:pjnutt
ID: 40461015
I have attached a copy of the certificate that complains when launching Outlook.  I have also attached a screen shot of the "good" certificate I have already successfully installed.  Where does the extra one get stored.  I do not see it on the server under the Certification Authority -> Issued Certificates....
CaptureCommon.JPG
GoodCert.png
0
Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

 
LVL 28

Expert Comment

by:becraig
ID: 40461038
See the attached image

The certificate should be present in the Personal -> certificates folder

It should then on EVERY client be installed to the folder where the arrow is pointing.
snippet.PNG
0
 
LVL 28

Expert Comment

by:becraig
ID: 40468733
Did you still need any help with this ?

Let me know if you have any questions and if you were able to resolve this.
0
 

Author Comment

by:pjnutt
ID: 40470910
No, still questions.  I try and store there on every local computer, however; it doesn't get stored.  Every time I launch outlook, it pops up again.
0
 
LVL 28

Accepted Solution

by:
becraig earned 500 total points
ID: 40470945
So the actual solution here should be pushing out the certificate via GPO.

Please try the steps below

http://technet.microsoft.com/en-us/library/cc738131%28v=ws.10%29.aspx
0
 

Author Closing Comment

by:pjnutt
ID: 40473776
I had to google how to do it in Server 2008, but the answer was to push it in the GPO.  Thanks for the help!
0

Featured Post

Do email signature updates give you a headache?

Do you feel like you are constantly making changes to email signatures? Are the images not formatting how you want them to? Want high-quality HTML signatures on all devices, including on mobiles and Macs? Then, let Exclaimer solve all your email signature problems today.

Join & Write a Comment

Resolve DNS query failed errors for Exchange
Easy CSR creation in Exchange 2007,2010 and 2013
In this video we show how to create a Contact in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Contact ta…
To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now