Solved

Exchange 2013 OWA

Posted on 2015-01-16
4
710 Views
Last Modified: 2015-05-15
Hello,
Having a certificate issue with Exchange 2013 OWA

Time and date are correct on server
I get the following error:

Your connection is not private

Attackers might be trying to steal your information from mail.taeyangusa.com (for example, passwords, messages, or credit cards).

Back to safetyAdvanced
NET::ERR_CERT_AUTHORITY_INVALID

I have run the following commands in Exchange Power Shell
Any help is appreciated, Thanks !
$AutodiscoverHostName = "autodiscover.xxxxxx.com"

Get-ExchangeServer | Where {($_.AdminDisplayVersion -Like "Version 15*") -And ($_.ServerRole -Like "*ClientAccess*")} | Set-ClientAccessServer -AutoDiscoverServiceInternalUri https://$AutodiscoverHostName/Autodiscover/Autodiscover.xml
0
Comment
Question by:jac1991
4 Comments
 
LVL 10

Expert Comment

by:Muhammad Mulla
ID: 40553467
1. Check from another client.
2. Check date and time on client.
3. Open Certificates plugin from mmc.exe for local computer on the client and check that it has the root certificate for the cert you are using.
0
 
LVL 63

Expert Comment

by:Simon Butler (Sembee)
ID: 40553849
Is this a trusted SSL certificate or are you still using the self signed one that Exchange generates?
If it is a trusted certificate, is it from a well known vendor?
If self signed, then you need to use a trusted certificate. The self signed certificate that Exchange creates is designed as a place holder only.

Simon.
0
 
LVL 6

Accepted Solution

by:
BurundiLapp earned 500 total points
ID: 40553867
The certificate error: ERR_CERT_AUTHORITY_INVALID  suggest that the Certificate Authority that issued your Exchange certificate does not exist (i.e: it is a self signed certificate), was created by a Trusted Certificate Authority but you do not have that Certificate Authorities root certificate installed in your browser or in Windows if using IE, OR it is from a Certificate Authority that has had it's root certificates revoked or the root certificate has expired.

The most likely of these being it is a self signed certificate generated by Exchange itself.  If you intend to use OWA over the internet then you need to get a certificate from a trusted certificate authority such as Thawte, Verisign, Globalsign, etc..., ensure you get a certificate suitable for Exchange use, a certificate just for website would not be sufficient I think.

Also try this in different browsers.  Chrome is not giving somewhat misleading errors about certificates that signed using SHA1, another browser will not give the same error.

HTH
0
 

Expert Comment

by:sly-kyorin
ID: 40779239
Or if you don't want to pay for one (which really you should) get a free certificate from somewhere like StartSSL, I've never had an issue using certs from them for SBS/Exchange.
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Lotus Notes – formerly IBM Notes – is an email client application, while IBM Domino (earlier Lotus Domino) is an email server. The client possesses a set of features that are even more advanced as compared to that of Outlook. Likewise, IBM Domino is…
Scam emails are a huge burden for many businesses. Spotting one is not always easy. Follow our tips to identify if an email you receive is a scam.
This Micro Tutorial will demonstrate how nuggets on the Web are formatted by using Chrome Developer Tools. These tools would not only view the site's CSS but it can also modify it and save the CSS to use on your own site.
This video demonstrates how to sync Microsoft Exchange Public Folders with smartphones using CodeTwo Exchange Sync and Exchange ActiveSync. To learn more about CodeTwo Exchange Sync and download the free trial, go to: http://www.codetwo.com/excha…

740 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question