Exchange 2016 OWA is not opening on chrome.

I have just installed Exchange 2016 Version 15.1 ‎(Build 544.27)‎ ; even at the hosted server (windows 2016) I am unable to open OWA/ECP at google chrome Version 54.0.2840.99 m (64-bit).
Chrome says: ERR_SPDY_INADEQUATE_TRANSPORT_SECURITY

I am using SSL certificates: https://www.ssls.com/ssl-certificates/comodo-positivessl-multi-domain 
I am using the same kind of certificate protected exchange 2013 servers on chrome without any issue.

I have found the related links:

https://social.technet.microsoft.com/Forums/en-US/a858858c-71f4-4968-a49b-25559019148f/exchange-2016-owa-will-not-open-in-firefox-or-chrome
https://www.experts-exchange.com/questions/28592968/SSL-Certs-Google-SHA1.html

https://www.nartac.com/Products/IISCrypto

https://support.mozilla.org/en-US/questions/1143320 

Please guide the recommended procedure to resolve the issue.
LVL 2
Akash BansalIT ProfessionalAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Todd NelsonSystems EngineerCommented:
Take a look at these articles. Known issues with Exchange 2016 and Windows 2016.

https://blogs.technet.microsoft.com/exchange/2016/11/04/update-on-windows-server-2016-and-exchange-server-2016/

https://exchangeserverpro.com/dont-deploy-exchange-server-2016-windows-server-2016-now-due-stability-issues/

Recommendation is to install Exchange 2016 on Windows 2012 R2.
0
Akash BansalIT ProfessionalAuthor Commented:
Thanks for the links.

As per the link you shared the issue comes when you configure DAG not in a standalone installation. I have also configured a standalone setup. My issue i guess is due to http2 protocol enabled by default. Pls guide me further.


Extract from links shared in previous comment:

Magnus
November 7, 2016 at 5:21 am
If running a standalone Exchange 2016 on WS2016 without DAG, there should be no issues?

Reply
Bharat Suneja [MSFT]
November 7, 2016 at 7:27 am
That’s correct.

Reply
Eliseo Villafuerte
November 7, 2016 at 9:06 pm
Yes, no issue when Windows 2016 is used to deploy Exchange 2016 CU3 in non-DAG configuration. So I deployed on WS2012R2 to enable HA. Will wait patiently for the fix.
0
Todd NelsonSystems EngineerCommented:
In the three separate lab scenarios I have--all Exchange 2016 CU3 stand-alone servers on Windows 2016 RTM--there isn't one that functions properly.

I'll probably stick with Exchange 2016 on Windows 2012 R2 in production for future installs until CU4/5.
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

Akash BansalIT ProfessionalAuthor Commented:
I download and ran the IIS Crypto 2 tool, Clicked the best Practices button & hit apply, rebooted and all is fixed.
I don't know what the tool did; couldn't find the log report after the reboot.

https://www.nartac.com/Products/IISCrypto

Now I can open the owa/ECP at the chrome as well.
Though all looks cool & smooth now, I still cautious & in dilemma if I put it in production or not.
Though this server would be having up to 10 mailboxes & would be standalone for ever.
1

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Akash BansalIT ProfessionalAuthor Commented:
Mr. Todd Nelson gave the best recommendation. I agree with him.
As it's a small standalone installation, I dare to go with the existing plan.
The steps I performed fixed the current issue so I choosed my solution.
0
Akash BansalIT ProfessionalAuthor Commented:
https://www.nartac.com/Products/IISCrypto

Before applying Best practice:
default-certificate-settings-in-2016
After applying best practice:
after-best-practice-certificate-settings-in-2016
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
SSL / HTTPS

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.