Link to home
Start Free TrialLog in
Avatar of Dougj182
Dougj182Flag for Canada

asked on

Troubles with security certificates, exchange 2013, GoDaddy and internet/intranet invalid names

Hi Experts,
          As the title suggests, I'm having issues getting my SSL security certificates in Exchange 2013 validating Outlook from both internal and external connections. I can't seem to make the certificate accepted for internal (servername.domainname.local) and external (mail.domainname.com) outlook connections. On one certificate with servername.domainname.local as the primary address the internal Outlook clients connect just fine but external clients refuse to connect via Outlook Anywhere, then when I change the certificate to have mail.domainname.com as the primary, Outlook anywhere connects fine but internal clients complain that the certificate name is invalid but still allow the connection. The certificate is a single domain certificate issued via GoDaddy.

Help me Experts-Exchange, you're my only hope.
ASKER CERTIFIED SOLUTION
Avatar of Hypercat (Deb)
Hypercat (Deb)
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
From November 2015 you cannot have an SSL certificate with internal names on it.
You will need to use a split DNS system to ensure the external name resolves internally, then configure Exchange with the external name for both internal and external URLs.
http://semb.ee/hostnames2013

Simon.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Dougj182

ASKER

OK, so if I understand correctly, I need to change all the internal and external URL's in the virtual directory entries to https://mail.domainname.com/<type> next to the red arrows? is that correct?
User generated image
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Oh no, the exchange server is hosted in house, just the certificate comes from GoDaddy. Thnaks, I'll use PS to change the config and report. Thanks fory our help
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
So, I've made all the changes, autodiscover. and mail. have been added to the DNS pointing to the exchange server both internally and externally but I'm still getting this error from outlook..? Suggestions?

User generated image
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Thanks, let me try it.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
checking in...  how'd it go?
Just picked this up again from being on vacation, thanks for checking in. I'll let you know how it goes.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
I figured out the final part of the problem myself.
Avatar of Clark20ry
Clark20ry

I was having the same issue. I added the SRV Record and no longer get the warning.