We help IT Professionals succeed at work.

Exchange 2010 - Outlook clients receiving an error stating  "The name on the security certificate is invalid or does not match the name of the site"

Ollie Branche
Ollie Branche asked
on
I have an in house Exchange Server (Internal name DC01 - local IP 192.168.1.2) FQDN mail.mydomain.com
Remote users access the Server via Http and have no issues connecting and do not receive the certificate error. They have the following settings.
Server mail.mydomain.com
username  the user's ID
Proxy settings
https  mail.mydomain.com
msstd:mail.mydomain.com
basic auth

Internal users receive the error message with the following settings
server dc01.mydomain.local
username  user's ID
no proxy settings.

Internal DNS A record  mail.mydomain.com points to the IP address of the Exchange server 192.168.1.2.
Does anyone know how to resolve this issue with OL.

Thanks in advance
Comment
Watch Question

MASEE Solution Guide - Technical Dept Head
Most Valuable Expert 2017

Commented:
Please follow my article to resolve this issue.
Technet
EE
If not resolved please let me know

Author

Commented:
Sorry for the long delay.
I followed the steps in the article and the issue still remains
MASEE Solution Guide - Technical Dept Head
Most Valuable Expert 2017

Commented:
Can you post the error here?

Do you have autodiscover.emaildomain.com and mail.emaildomain.com in your certificate?
Can you see your common name(i.e. mail.emaildomain.com) in the results of the below command?
Get-clientAccessServer | fl Name,AutoDiscoverServiceInternalUri
Get-OabVirtualDirectory |  fl Server,Name,internalurl,externalurl
Get-WebServicesVirtualDirectory | fl name,internalurl,externalurl

Open in new window

Do you have below A records created which points to Exchange2010 server internal IP?
mail.emaildomain.com
autodiscover.emaildomain.com

If all these done you shoud not get certificate error

Author

Commented:
No error messages. Outlook just pops a message stating The name on the security certificate is invalid or does not match the name of the site.
EE Solution Guide - Technical Dept Head
Most Valuable Expert 2017
Commented:
Did you follow my article?

Did you try what I suggested in my last post?

After doing that please run the belwo commands in your Exchange powerShell and post the results. All these explained in my article in my first post.
1. Get-clientAccessServer | fl Name,AutoDiscoverServiceInternalUri
2. Get-OabVirtualDirectory |  fl Server,Name,internalurl,externalurl
3. Get-WebServicesVirtualDirectory | fl name,internalurl,externalurl
MASEE Solution Guide - Technical Dept Head
Most Valuable Expert 2017

Commented:
You should select my first port as answer as all these explained in detail in my article which will help others in future
Hi MAS, I have the same issue, and get internal and external URLs for 2/3 of the powershell commands, the last one (Get-webservices) shows no external URL. I am getting errors for autodiscover.server.com and mail.server.com. Please advise.
Also, autodiscover has a host (a) that's using autodiscover.domain.com for it's FQDN. Is that correct? My error is twice-fold, mail.domain.com is showing a "name does not match" as well as autodiscover.domain.com showing the same error. Thanks in advance!