We help IT Professionals succeed at work.

Outlook 2007 Autodiscover

kingcastle
kingcastle asked
on
Hi

I have a problem with an Outlook 2007 in that every few seconds its popping up saying security alert autodiscover.domain.com.

The security certificate was issued by a company you have not chosen to trust.

I have to keep pressing yes to continue. I have tried installed the cert adding to it the trusted sites on IE but still no joy.

any ideas?

Thanks
Comment
Watch Question

Ideally ou must install a certificate that is not a self-signed certificate on the Exchange server that hosts the Client Access Server role, i am guessing Exchange 2010 in your case?

See article:

http://support.microsoft.com/kb/2006728
Does the SSL certificate installed on Exchange server have the autodiscover.domain.com?
Does the SSL certificate installed on Exchange server is thrid party of self-signed?
Exchange version?

Run the following command to configure client access autodiscoveruri and ews virtual directory
Set-ClientAccessServer -Identity "servername" -AutoDiscoverServiceInternalUri https://mail.domain.com/autodiscover/autodiscover.xml

Set-WebServicesVirtualDirectory -Identity "servername\EWS (Default Web Site)" -InternalUrl https://mail.domain.com/EWS/Exchange.asmx -ExternalUrl https://mail.domain.com/EWS/Exchange.asmx

create a new internal dns zone with domain.com and create A host record mail.domain.com and point it to exchange server.

If the ssl certificate is third party certificate then install it on each workstation.
Senior Solution Architect
Most Valuable Expert 2015
Top Expert 2015
Commented:
When you are using certs for Exchange you need to ensure that mail.domain.com and autodiscover.domain.com are listed as SAN names within the cert (DNS). If autodiscover.domain.com is not listed and your virtual directories are set to use mail.domain.com/..... for your virtual directories this is why you are receiving this SSL error.

As stated already, if you are using External mail.domain.com for your internal virtual directory URL's then you need to create a new DNS Zone for this domain name.

Will.