Exchange 2013 Internal URL SSL Error

When running the Get-CASHealthCheck.ps1 provided on ExchangeServerPro.com

(http://exchangeserverpro.com/testing-exchange-server-2013-client-access-server-health-with-powershell/)

Everything passes, except the mapi/healthcheck.htm checks on the Internal URL.

----- Internal URL Health Checks:
Testing https://owa.contoso.com/OWA/healthcheck.htm OK
Testing https://owa.contoso.com/ECP/healthcheck.htm OK
Testing https://owa.contoso.com/OAB/healthcheck.htm OK
Testing https://owa.contoso.com/rpc/healthcheck.htm OK
Testing https://owa.contoso.com/EWS/Exchange.asmx/healthcheck.htm OK
Testing https://EX2013-CAS01.contoso.local/mapi/healthcheck.htm SSL error
Testing https://EX2013-CAS02.contoso.local/mapi/healthcheck.htm SSL error
Testing https://EX2013-CAS03.contoso.local/mapi/healthcheck.htm SSL error
Testing https://EX2013-CAS04.contoso.local/mapi/healthcheck.htm SSL error
Testing https://EX2013-CAS05.contoso.local/mapi/healthcheck.htm SSL error
Testing https://owa.contoso.com/Microsoft-Server-ActiveSync/healthcheck.htm OK
Testing https://autodiscover.contoso.com/Autodiscover/healthcheck.htm OK
Testing https://autodiscover.contoso.com/AutoDiscover/AutoDiscover.xml/healthcheck.htm OK

How would one go about resolving this issue?

Would this be resolved by changing the directories from https://EX2013-CAS01.contoso.local/mapi to https://owa.contoso.com/MAPI as I know we have the SSL for OWA and Autodiscover.

IF thats the case, what command would I use to change this?

Thanks in advance.
Christian HansAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Dan McFaddenSystems EngineerCommented:
All of Exchange URLs should match except for the autodiscover URLs.

So as you stated, the SSL Error URLs should have a hostname in the URL of "owa.contoso.com"

Dan
0
Dan McFaddenSystems EngineerCommented:
If you read thru the article on the site above, the author posted examples of a good setup and one with errors.

Dan
0
Simon Butler (Sembee)ConsultantCommented:
Reconfigure the server thus:
get-mapivirtualdirectory -server servername | Set-MAPIVirtualDirectory -InternalURL https://host.example.com/MAPI -ExternalURL https://host.example.com/MAPI

Where servername is the name of your server and host.example.com is the name that matches your SSL certificate.

Simon.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.