Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 73
  • Last Modified:

exchange , certificates

I am trying to export SSL certificate installed on my exchange to one of the windows laptop that laptop is not configured on domain

and that  outlook client user is having cert pops error when opening outlook ,

but when I install cert on the laptop, where should I check the cert has been installed and it is working ok

it doesn't show up in mmc in personal under certificate

also how will I know the cert is installed correctly
0
pramod1
Asked:
pramod1
  • 5
  • 3
1 Solution
 
Todd NelsonSystems EngineerCommented:
Please provide a screenshot of the error.

Is the Exchange certificate you are trying to export a self-signed cert or a cert provided by a public certificate authority (like GoDaddy or Digicert)?
0
 
pramod1Author Commented:
cert provided by our internal CA
0
 
IvanSystem EngineerCommented:
Hi,

since you have internal CA, you need to export Root cert, from Root CA, and import into Trusted Root Certification Authority on that client machine. Don't let it choose store automatically, select this store.

After that, cert presented from your Exchange, should be OK.

PS: Import into machine store, not personal.

Regards,
Ivan.
1
Who's Defending Your Organization from Threats?

Protecting against advanced threats requires an IT dream team – a well-oiled machine of people and solutions working together to defend your organization. Download our resource kit today to learn more about the tools you need to build you IT Dream Team!

 
pramod1Author Commented:
my cert on exchange is under console root -personal certificates, should I import from there
0
 
pramod1Author Commented:
when users logs into portal www.domainaccess.com and opens outlook it gives the cert error

I installed the cert on her machine into trusted root authority, still getting error
0
 
IvanSystem EngineerCommented:
Hi,

on any domain computer/ server, go to MMC --> Add certificate snap-in --> for Computer account.
Then open Trusted Root Certification Authority --> Certificates --> "find your Root CA certificate" --> Export it (Copy to File).
Then import into that client machine, in same location.

Regards,
Ivan.
0
 
IvanSystem EngineerCommented:
Can you post print screen of error?
0
 
pramod1Author Commented:
I have to export from exchange server and under mmc-console root I see cert under personal; and not under trusted root certification authorities
0
 
pramod1Author Commented:
attached snap shot
Capture.JPG
Capture2.JPG
0

Featured Post

Keep up with what's happening at Experts Exchange!

Sign up to receive Decoded, a new monthly digest with product updates, feature release info, continuing education opportunities, and more.

  • 5
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now