Prev: Exchange 2007 typical CPU utilization (store.exe)
Next: mails cannot been displayed in OWA, but outlook is OK
From: Rich Matheisen [MVP] on 27 Jan 2010 11:42
On Wed, 27 Jan 2010 15:59:44 +1000, "un1c0rn" <un1c0.rn(a)yahoo.com>
wrote:

>Tried that and seems to go without issue but the same error appears in the
>event log.

What does "go without issue" mean? Does the "S" show up beneath the
"Services" column or not?

How many certificates show up in that get-exchangecertificate output?
For the one that you /think/ you're using, do this:

get-exchangecertificate <thumbprint> | fl

In the "CertificateDomains", what names do you see?

Is the certificate "Status" valid?
---
Rich Matheisen
MCSE+I, Exchange MVP
From: un1c0rn on 28 Jan 2010 18:24
Yes, the S is showing. I have pasted the results below:

AccessRules : {System.Security.AccessControl.CryptoKeyAccessRule,
System.Security.AccessControl.CryptoKeyAccessRule,
System.Security.AccessControl.Crypt
oKeyAccessRule}
CertificateDomains : {ibbne02.implicitbioscience.com}
HasPrivateKey : True
IsSelfSigned : True
Issuer : CN=ibbne02.implicitbioscience.com
NotAfter : 25/01/2011 4:34:57 PM
NotBefore : 25/01/2010 4:34:57 PM
PublicKeySize : 1024
RootCAType : None
SerialNumber : 0B904E42A8BF7497442B5D0C996F10DA
Services : IMAP, POP, SMTP
Status : Valid
Subject : CN=ibbne02.implicitbioscience.com
Thumbprint : EE6A8770B794FA4A820C3F007D6FF48C921A629D

AccessRules : {System.Security.AccessControl.CryptoKeyAccessRule,
System.Security.AccessControl.CryptoKeyAccessRule,
System.Security.AccessControl.Crypt
oKeyAccessRule}
CertificateDomains : {ibbne02.implicitbioscience.com}
HasPrivateKey : True
IsSelfSigned : True
Issuer : CN=ibbne02.implicitbioscience.com
NotAfter : 25/01/2011 12:58:13 PM
NotBefore : 25/01/2010 12:58:13 PM
PublicKeySize : 1024
RootCAType : None
SerialNumber : A042EAACF8B7AE9E442AAD4DED8A2114
Services : IMAP, POP, IIS, SMTP
Status : Valid
Subject : CN=ibbne02.implicitbioscience.com
Thumbprint : A4F371262BBE4361E26AC31CBEE50B129C332FB0

"Rich Matheisen [MVP]" <richnews(a)rmcons.com.NOSPAM.COM> wrote in message
news:htq0m5p5e4jhf70mc0msoc8e7ehtbo7qr4(a)4ax.com...
> On Wed, 27 Jan 2010 15:59:44 +1000, "un1c0rn" <un1c0.rn(a)yahoo.com>
> wrote:
>
>>Tried that and seems to go without issue but the same error appears in the
>>event log.
>
> What does "go without issue" mean? Does the "S" show up beneath the
> "Services" column or not?
>
> How many certificates show up in that get-exchangecertificate output?
> For the one that you /think/ you're using, do this:
>
> get-exchangecertificate <thumbprint> | fl
>
> In the "CertificateDomains", what names do you see?
>
> Is the certificate "Status" valid?
> ---
> Rich Matheisen
> MCSE+I, Exchange MVP

From: Rich Matheisen [MVP] on 28 Jan 2010 21:36
On Fri, 29 Jan 2010 09:24:39 +1000, "un1c0rn" <un1c0.rn(a)yahoo.com>
wrote:

>Yes, the S is showing. I have pasted the results below:

Both certificates have the same name. Neither of them are for
mail.implicitbioscience.com -- so the error message is correct,
there's no certificate that matches the name.

>CertificateDomains : {ibbne02.implicitbioscience.com}
>CertificateDomains : {ibbne02.implicitbioscience.com}

Have you changed the FQDN on the Send or Receive Connectors from
ibbne02.implicitbioscience.com to mail.implicitbioscience.com?

You can get a certificate with multiple names (a "SAN" or "UC")
certificate. You'll need one if you're going to use different names
for different things (OWA, autodoscover, email, etc.).
---
Rich Matheisen
MCSE+I, Exchange MVP
From: un1c0rn on 1 Feb 2010 01:03
Thankyou Rich, That worked! You are a genius! :-)

"Rich Matheisen [MVP]" <richnews(a)rmcons.com.NOSPAM.COM> wrote in message
news:5oh4m5li7sf03khddi509i1lkpqtruj395(a)4ax.com...
> On Fri, 29 Jan 2010 09:24:39 +1000, "un1c0rn" <un1c0.rn(a)yahoo.com>
> wrote:
>
>>Yes, the S is showing. I have pasted the results below:
>
> Both certificates have the same name. Neither of them are for
> mail.implicitbioscience.com -- so the error message is correct,
> there's no certificate that matches the name.
>
>>CertificateDomains : {ibbne02.implicitbioscience.com}
>>CertificateDomains : {ibbne02.implicitbioscience.com}
>
> Have you changed the FQDN on the Send or Receive Connectors from
> ibbne02.implicitbioscience.com to mail.implicitbioscience.com?
>
> You can get a certificate with multiple names (a "SAN" or "UC")
> certificate. You'll need one if you're going to use different names
> for different things (OWA, autodoscover, email, etc.).
> ---
> Rich Matheisen
> MCSE+I, Exchange MVP

First  |  Prev  | 
Pages: 1 2
Prev: Exchange 2007 typical CPU utilization (store.exe)
Next: mails cannot been displayed in OWA, but outlook is OK