"The certificate is invalid for Exchange Server usage" Error
Hello,
I have 3 Exchange 2010 servers.
EXC2010 -> Mailbox, CAS, Hub transport (First server)
MAILBOX -> CAS, Mailbox (Second server)
EXCAS -> CAS, Mailbox (Third server)
I want to use 2 CAS server and load balance the traffic between EXCAS and MAILBOX. After load-balancing, I'll remove CAS and MAILBOX roles from EXC2010 server.
I can create certificate and assign it to EXCAS and EXC2010 without problem but I can't add a certificate to MAILBOX server. I also exported the certificate from EXC2010 and imported to EXCAS without no problem, but I also tried to import it to MAILBOX,
I always receive this error.
I mean, I use same SSL certificate in server EXCAS and server EXC2010 but I can't use any certificate with same Common name in server MAILBOX.
What is the problem of server MAILBOX? How can I resolve it?
Screenshots:
http://www.yusufozturk.info/images/EXCAS.png
http://www.yusufozturk.info/images/EXC2010.png
http://www.yusufozturk.info/images/MAILBOX.png
http://www.yusufozturk.info/images/MAILBOX2.png
Thanks for help.
MSP - Microsoft Student Partner (2009-2010) http://www.yusufozturk.info
May 4th, 2010 11:12pm
Update:
I figured out, server "MAILBOX" doesn't recognize RootCAType. Please check here:
http://www.yusufozturk.info/images/rootcatype.png
How can I resolve it?
Thanks.MSP - Microsoft Student Partner (2009-2010) http://www.yusufozturk.info
Free Windows Admin Tool Kit Click here and download it now
May 4th, 2010 11:32pm
I solved it. Using MMC, I exported "Alpha CA" certificate, and imported it to Intermediate Certificataion Auth. and Trusted Root Certificataion Auth then I refresh Exchange Server 2010 console, now it looks OK.
I hope this helps anothers who have same problems.MSP - Microsoft Student Partner (2009-2010) http://www.yusufozturk.info
May 5th, 2010 1:17am
Thank you for sharing with us. :)
Free Windows Admin Tool Kit Click here and download it now
May 5th, 2010 6:28am
Hi there,
I'm having a similar issue, I'm using a win 2008 Enterprise CA installed in the root domain to issue SAN certificate for Exchange 2010 for test.
I'm getting this error: The certificate is invalid for Exchange Server usage
I've already imported my CA to Trusted Root Certification Auth & Intermediate Certification Auth in my Exchange server.
Thks.
June 26th, 2010 5:06pm
Thank you, that solved the problem I was having.
Free Windows Admin Tool Kit Click here and download it now
October 18th, 2010 6:35pm