Hi Marvin, That isn't really an error, it just shows that the client doesn't trust the server's certificate. Put the CA certificate into the client's Trusted Root Certification Authorities certificate store and all will be fine. You can request the CA cert or cert chain from the Web enrollment site. HTH, Tom Thomas W Shinder www.isaserver.org/shinder <http://www.isaserver.org/shinder> ISA 2004 Beta - Get it now! http://www.microsoft.com/isaserver/beta/default.asp <http://www.microsoft.com/isaserver/beta/default.asp> ISA Server and Beyond: http://tinyurl.com/1jq1 Configuring ISA Server: http://tinyurl.com/1llp <http://tinyurl.com/1llp> -----Original Message----- From: Marvin Cummings [mailto:marvin.cummings@xxxxxxxxxxxxxxx] Sent: Wednesday, April 28, 2004 12:58 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Certificate not appearing... http://www.ISAserver.org to get mail.mydomain.com working i believe you have to have /exchange in the "path" field of the destination set. I've added the following to my OWA destination set: /exchange* /exchweb* /public* My listener IP points to an IP I've added to the external interface of the ISA server. It was meant for this IP to be associated with mail.mydomain.com just as there's one associated with www.mydomain.com <http://www.mydomain.com/> . I tried to use mail.mydomain.com and it didn't work. Trying to access it gave me this error: The security certificate for this site has either expired or does not match the server name. Would you like to continue viewing pages at this site? And as I mentioned in my last post I get a different error when trying to access it as www.mydomain.com/exchange _____ From: Marvin Cummings [mailto:marvin.cummings@xxxxxxxxxxxxxxx] Sent: Wednesday, April 28, 2004 1:25 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Certificate not appearing... http://www.ISAserver.org Thanks That was exactly what I needed to do. The only problem is that I get "The page you are looking for cannot be found" error when trying to access the page on my PDA. This is after trying to access the page as https://www.mydomain.com/exchange. Could I be doing something wrong? Anyone? _____ From: Greg Mulholland [mailto:gregstelatel@xxxxxxxxxxx] Sent: Tuesday, April 27, 2004 9:50 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Certificate not appearing... http://www.ISAserver.org Marvin If i remember what i did correctly, i think i copied the certificate into the Trusted Root Certificate Authority and got it working, although i am not 100% sure. to get mail.mydomain.com working i believe you have to have /exchange in the "path" field of the destination set. Greg _____ From: Marvin Cummings [mailto:marvin.cummings@xxxxxxxxxxxxxxx] Sent: Wednesday, 28 April 2004 8:48 AM To: [ISAserver.org Discussion List] Subject: [isalist] Certificate not appearing... http://www.ISAserver.org I'm trying to configure OWA 2003 using ISA 2000 and I've ran into a problem with the certificate. After copying the certificate over to the ISa server and importing it to the Personal store I find that the CA certificate doesn't appear in the Trusted Root Certificate Authorities list. I've deleted the certificate from the Personal store and re-imported it but it still doesn't show. I've even gone and revoked the certificate from the CA on the DC and removed it from email and ISA server and started from scratch. Is it possible to copy this CA certificate that appears in the Personal store to the Trusted Root Cetification Authorities folder? Or will that cause problems? Thanks Also Is it possible to have mail.mydomain.com instead of www.mydomain.com/exchange? This is what I was trying to do originally but it wouldn't work. I'm using the documentation listed here as a reference: http://www.msexchange.org/tutorials/pubowa2003toc.html Thanks again ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: gregstelatel@xxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: marvc@xxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: marvc@xxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')