Solved

Outlook 2016 Security Alert certificate error - Security Cert for this site has been revoked.

Posted on 2016-09-15
11
421 Views
Last Modified: 2016-10-11
I am running Windows 10 Home, with Outlook 2016 using Exchange online plan.  When I test Email AutoConfiguration, I see the following in the log:  Autodiscover to https://autodiscover.domain.com/autodiscover/auotdiscover.xml Failed (0x80070057)
Local autodiscover for domain.com Failed (0x8004010F)
I can see the certificate has expired, but confused why it would look for an Equifax Cert when I'm using Exchange online plan?
Is it possible to stop Outlook or Windows to stop looking for this certificate?

Thanks in advance.
0
Comment
Question by:lbideaux
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 6
  • 4
11 Comments
 
LVL 17

Assisted Solution

by:Ivan
Ivan earned 150 total points (awarded by participants)
ID: 41800474
Hi,

autodiscover is going to look for domain.com first, and then will go to autodiscover.domain.dom.
That is by design.

Are you using Equifax Cert  on your domain.com site?

Regards,
Ivan.
0
 
LVL 49

Assisted Solution

by:Akhater
Akhater earned 349 total points (awarded by participants)
ID: 41801285
have you created the correct autodiscover record in your DNS with autodiscover.domain.com CNAME for utodiscover.outlook.com ?

note that if you have domain.com also in your LAN you will need to create this record on both your internal and external DNS servers


also, the way autodiscover works it will start by querying https://domain.com/autodiscover and (if this fails) will faill back to autodiscover.domain.com/autodiscover (which is what you want)

you have no real way of solving your problem other than

1) fix your certificate on https://domain.com 
2) make https://domain.com not reachable
0
 

Author Comment

by:lbideaux
ID: 41802014
Ivan,
I used the following website and it shows the expired cert for the domain.  https://www.sslshopper.com/ssl-checker.html
I didn't setup the domain, but might be able to get access to their hosting.
There are only a handful of PC's so if I could find a fix for the PC/Outlook I could apply to the few PC's.

Thanks.
0
Revamp Your Training Process

Drastically shorten your training time with WalkMe's advanced online training solution that Guides your trainees to action.

 
LVL 49

Expert Comment

by:Akhater
ID: 41802048
Add in the hostsfile of the computer domain.com pointing to 127.0.0.1 it would render https://domain.com inaccessible and would solve your issue
0
 

Author Comment

by:lbideaux
ID: 41802154
In Office 365 I ran the Check DNS, and returned "All DNS records are correct no errors found.
0
 

Author Comment

by:lbideaux
ID: 41802158
Akhater,
Ok, could this cause any issues browsing to the website?

Thanks for your input.
0
 
LVL 49

Expert Comment

by:Akhater
ID: 41802166
Off course they won't be able to reach domain.com anymore but they will be able to reach www.domain.com
0
 
LVL 49

Expert Comment

by:Akhater
ID: 41802168
And it's not an error with the dns configuration but an expired certificate in your website so it is normal that office 365 will detect no errors
0
 

Accepted Solution

by:
lbideaux earned 1 total points (awarded by participants)
ID: 41809148
I ended up using the following registry edit:  

[HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\AutoDiscover]
"ExcludeHttpsRootDomain"=dword:00000001
0
 
LVL 49

Expert Comment

by:Akhater
ID: 41810232
Thanks for sharing your solution
0
 
LVL 49

Expert Comment

by:Akhater
ID: 41838065
Question answered, OP solved it on the client side
0

Featured Post

PeopleSoft Has Never Been Easier

PeopleSoft Adoption Made Smooth & Simple!

On-The-Job Training Is made Intuitive & Easy With WalkMe's On-Screen Guidance Tool.  Claim Your Free WalkMe Account Now

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

You need to know the location of the Office templates folder, so that when you create new templates, they are saved to that location, and thus are available for selection when creating new documents.  The steps to find the Templates folder path are …
Unified and professional email signatures help maintain a consistent company brand image to the outside world. This article shows how to create an email signature in Exchange Server 2010 using a transport rule and how to overcome native limitations …
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …
CodeTwo Sync for iCloud (http://www.codetwo.com/sync-for-icloud?sts=6554) automatically synchronizes your Outlook 2016, 2013, 2010 or 2007 folders with iCloud folders available via iCloud Control Panel. This lets you automatically sync them with…

729 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question