RE: Browsing Folders, I get "SSL certificate is not valid"

  • From: "adrian bolzan" <abolzan@xxxxxxxxxxxxxxxxxxxxxxxxx>
  • To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx>
  • Date: Wed, 19 Jan 2005 12:14:11 +1100

Ok, I have "fixed" the problem.

I cannot access the buttons (Edit, Server Certificate, View Certificate)
under Secure Communications when using IIS Manager remotely from my
workstation.

If I use the IIS Manager on the exchange server itself I am able to
access the buttons. Strange.

Thanks for all of your help.

Adrian


> -----Original Message-----
> From: adrian bolzan [mailto:abolzan@xxxxxxxxxxxxxxxxxxxxxxxxx] 
> Sent: Wednesday, 19 January 2005 9:59 AM
> To: [ExchangeList]
> Subject: [exchangelist] RE: FW: Browsing Folders, I get "SSL 
> certificate is not valid"
> 
> http://www.MSExchange.org/
> 
> Hi Chand,
> 
> Thanks again for your reply.
> 
> The SSL certificate's server name is mail.domain.com.au, 
> which is not the FQDN for the server.
> 
> Forgive my ignorance but where in IIS manager do I set the 
> header? From this I guess I am not using headers...?
> Also, if I set these headers will I have access to my Edit 
> button under Secure Communications?
> 
> I will also revisit the process and see if I can remove the 
> certificate.
> 
> I should have waited for a FE server...
> 
> Cheers,
> Adrian
> 
>  
> 
> > -----Original Message-----
> > From: Deshwal, Chand [mailto:CDD@xxxxxxxxxxxxx]
> > Sent: Monday, 17 January 2005 2:55 PM
> > To: [ExchangeList]
> > Subject: [exchangelist] RE: FW: Browsing Folders, I get "SSL 
> > certificate is not valid"
> > 
> > http://www.MSExchange.org/
> > 
> > Hi,
> > 
> > SSL certificate should contain FQDN of Exchange Server. If you have 
> > specified the FQDN in the certificate and still getting SSL 
> > Certificate Server Name is incorrecte, then I am sure, you 
> are using 
> > headers in the site name. Suppose, your server FQDN is 
> MX1.DOMAIN.COM 
> > and you have used a hearder in the OWA site as 
> MAIL.DOMAIN.COM, then 
> > your SSL certificate for this server should contain 
> MAIL.DOMAIN.COM as 
> > the server name and not MX1.DOMAIN.COM.
> > 
> > 
> > Chand
> > 
> > 
> > -----Original Message-----
> > From: adrian bolzan [mailto:abolzan@xxxxxxxxxxxxxxxxxxxxxxxxx]
> > Sent: Monday, January 17, 2005 4:25 AM
> > To: [ExchangeList]
> > Subject: [exchangelist] FW: Browsing Folders, I get "SSL 
> > certificate is not valid"
> > 
> > http://www.MSExchange.org/
> > 
> > Hi, 
> > 
> > Thought I would give this another go. :) 
> > 
> > Cheers,
> > Adrian
> > 
> > 
> > -----Original Message-----
> > From: AdrianB [mailto:adrianb@xxxxxxxxxxxxxxxxxxxxxxx]
> > Sent: Tuesday, 11 January 2005 11:54 AM
> > To: [ExchangeList]
> > Subject: [exchangelist] Browsing Folders, I get "SSL 
> > certificate is not valid"
> > 
> > http://www.MSExchange.org/
> > 
> > 
> > Hi all,
> > 
> > I set up SSL on our exchange server, using another Win2003 
> > server as the Certificate Authority, to allow secure access to OWA.
> > That works correctly.
> > 
> > However, when trying to brows the Folders in ESM I receive 
> the error:
> > 
> > The SSL certificate server name is incorrect.
> > ID no: c103b404
> > Exchange System Manager
> > 
> > I looked on the MS KB and found the article:
> > http://support.microsoft.com/?id=324345
> > You receive an SSL Certificate error message when you view 
> > public folders in Exchange System Manager
> > 
> > In the resolution, I am instructed to perform the following steps in
> > IIS:
> > 3.  Right-click Exadmin, and then click Properties.
> > 4.  Click the Directory Security tab.
> > 5.  Under Secure Communications, click Edit.
> > 
> > However, the 'Edit' button, and all other buttons, under 
> > Secure Communications are greyed out.
> > 
> > How best would I resolve this issue and allow access to 
> > "Folders" in ESM?
> > Should I just start the process again, of configure SSL?
> > 
> > I will be moving to a separate FE server or Citrix 
> > implementation so may just try to remove the requirement for 
> > SSL on the exchange server, anyway.
> > Again, how would I do this if I cannot access the "Secure 
> > Communications"
> > area in IIS?
> > 
> > As an aside, why is the "Folders" area in ESM so sensitive to 
> > the SSL certificate?
> > 
> > Any help appreciated,
> > 
> > Adrian
> > 
> > ------------------------------------------------------
> > List Archives: 
> > http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> > Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
> > Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Other Internet Software Marketing Sites:
> > World of Windows Networking: http://www.windowsnetworking.com 
> > Leading Network Software Directory: http://www.serverfiles.com
> > No.1 ISA Server Resource Site: http://www.isaserver.org 
> > Windows Security Resource Site: 
> > http://www.windowsecurity.com/ Network Security Library:
> > http://www.secinf.net/ Windows 2000/NT Fax Solutions:
> > http://www.ntfaxfaq.com
> > ------------------------------------------------------
> > You are currently subscribed to this MSEXchange.org 
> > Discussion List as:
> > cdd@xxxxxxxxxxxxx To unsubscribe visit
> > http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> > Report abuse to listadmin@xxxxxxxxxxxxxx
> > 
> > ------------------------------------------------------
> > List Archives: 
> > http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> > Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
> > Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Other Internet Software Marketing Sites:
> > World of Windows Networking: http://www.windowsnetworking.com 
> > Leading Network Software Directory: http://www.serverfiles.com
> > No.1 ISA Server Resource Site: http://www.isaserver.org 
> > Windows Security Resource Site: 
> > http://www.windowsecurity.com/ Network Security Library: 
> > http://www.secinf.net/ Windows 2000/NT Fax Solutions: 
> > http://www.ntfaxfaq.com
> > ------------------------------------------------------
> > You are currently subscribed to this MSEXchange.org 
> > Discussion List as: abolzan@xxxxxxxxxxxxxxxxxxxxxxxxx To 
> > unsubscribe visit 
> > http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> > Report abuse to listadmin@xxxxxxxxxxxxxx
> > 
> 
> ------------------------------------------------------
> List Archives: 
> http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
> Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 ISA Server Resource Site: http://www.isaserver.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this MSEXchange.org 
> Discussion List as: abolzan@xxxxxxxxxxxxxxxxxxxxxxxxx
> To unsubscribe visit 
> http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> Report abuse to listadmin@xxxxxxxxxxxxxx
> 


Other related posts: