Jim, Web Proxy Service - ISA 2004? Yes, unfortunately Exchange is my CA - I had to fight for 3 months to get a separate machine for ISA! ...Spence -----Original Message----- From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx] Sent: 01 March 2005 14:38 To: [ISAserver.org Discussion List] Subject: [isalist] RE: OWA Publishing http://www.ISAserver.org Did you restart the web proxy service after importing the CA cert? Is Exch really the CA? -----Original Message----- From: Spencer Read (Nemesis) [mailto:ser@xxxxxxxxxxxxx] Sent: Tuesday, March 01, 2005 4:41 AM To: [ISAserver.org Discussion List] Subject: [isalist] OWA Publishing http://www.ISAserver.org First of all, I'm sorry to raise this sore point again but ..... I followed Tom's guide from http://www.isaserver.org/articles/2004pubowartm.html to publish my OWA site and all was working fine when I first installed it. I could access the OWA site from externally and internally with no problems whatsoever. Then I rebooted my ISA server (Can't remember why!) and now externally I can't connect. The error I get is 'Error Code: 500 Internal Server Error. The certificate chain was issued by an authority that is not trusted. (-2146893019)' I found a message http://www.adminlife.com/247reference/msgs/6/31593.aspx saying to 'Obtain the CA cert from the SBS2K3 server and install it in the ISA local machine store trusted root certs' - I have done this (but not from an SBS2K3, from my exchange server) and still no good. I have also re-exported and re-imported the cert, restarted the ISA server again and still I get the same error. In the mean time, if I connect via VPN or connect from the local network it works fine. I searched for any other possible reasons using google and M$ knowledgebase but still can't find the fault. Does anyone know what I have done wrong and what I can do to fix it? Thanks ..Spence ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx All mail to and from this domain is GFI-scanned. ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: ser@xxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx