Certificate Error
I had to move mailboxes from one Exchange 2010 server to another. Seperate servers, No DAGs etc.
Just 2 seperate exchagne mailbox servers.
After I moved the mailbox from server 1 to serve 2 users are getting a certificate error.
Anyway to fix this
Thanks
DaveDave Kozlowski
September 12th, 2011 1:31am
Fix the certificate?
Remember that Outlook now connects to the CAS service, not the mailbox server directly, therefore certificates are important. What have you done with certificates? Does the second server have the CAS role? If so then it could be that you have an autodiscover
war going on.
http://blog.sembee.co.uk/post/Introduction-of-a-New-CAS-Server-Causes-Certificate-Prompts.aspx
Simon.Simon Butler, Exchange MVP
Blog |
Exchange Resources | In the UK?
Hire Me.
Free Windows Admin Tool Kit Click here and download it now
September 12th, 2011 1:42am
Looks like autodiscover is not turn on in the AD.
This is fairly new setup. Going to 2 seperate CAS/HUB servers and 2 mailbox servers and a DAG when all is done,
but for now we need to fix the certificate.
How do I turn on autodiscover?
thanks
DaveDave Kozlowski
September 12th, 2011 4:41am
Nothing has been configured as of yet.
Just 2 seperate mail servers. One we moved the users to the second we get the certificate error.
Now it goes away if we recreate the profile, but we are trying to keep this seemless to the user.
Thanks
DaveDave Kozlowski
Free Windows Admin Tool Kit Click here and download it now
September 12th, 2011 7:31am
These two articles are good:
Exchange Autodiscover (Part 1)
http://www.msexchange.org/articles_tutorials/exchange-server-2010/management-administration/exchange-autodiscover.html
Exchange Autodiscover (Part 2)
http://www.msexchange.org/articles_tutorials/exchange-server-2010/management-administration/exchange-autodiscover-part2.htmlMCTS: Messaging | MCSE: S+M
September 12th, 2011 7:57am
Regarding autodiscover
There is no item in Active Directory Sites and Services for Autodiscover.
Should that be configured.
Also anyway to tell if the Exchange AD schema has been extended?
thanks
Dave Kozlowski
Free Windows Admin Tool Kit Click here and download it now
September 12th, 2011 8:12am
You can't install Exchange 2010 without the schema being extended. Therefore if you already have an Exchange server in place then the schema has been extended.
What are you expecting to see in AD Sites and Services? Autodiscover doesn't appear in there.
When you get the certificate prompt it will tell you what is wrong. My instinct is what I posted above, that you have an Autodiscover war going on. Both CAS servers are publishing their own information for autodiscover and it depends on which server is used
depends on whether you get the error or not.
If you are going to separate CAS servers and a DAG you must configure a CAS array. If you don't, then you will not get any kind of high availability for the clients to connect. The DAG is only for the mailbox data, it has nothing to do with what the clients
connect to.
Simon.Simon Butler, Exchange MVP
Blog |
Exchange Resources | In the UK?
Hire Me.
September 12th, 2011 8:19am
Autodiscover is not something that you can turn on and off. It is part of the Exchange installation. How did you come to the conclusion that autodiscover was "turned off".
Have you configured a CAS array? If not then I suggest that you do so before you go any further. Trying to retro fit a CAS array is painful, as each Outlook client needs to be touched to get it to use the CAS array host name rather than the CAS server name.
Simon.Simon Butler, Exchange MVP
Blog |
Exchange Resources | In the UK?
Hire Me.
Free Windows Admin Tool Kit Click here and download it now
September 12th, 2011 1:03pm