Certificate Error
I had to move mailboxes from one Exchange 2010 server to another. Seperate servers, No DAGs etc. Just 2 seperate exchagne mailbox servers. After I moved the mailbox from server 1 to serve 2 users are getting a certificate error. Anyway to fix this Thanks DaveDave Kozlowski
September 12th, 2011 1:31am

Fix the certificate? Remember that Outlook now connects to the CAS service, not the mailbox server directly, therefore certificates are important. What have you done with certificates? Does the second server have the CAS role? If so then it could be that you have an autodiscover war going on. http://blog.sembee.co.uk/post/Introduction-of-a-New-CAS-Server-Causes-Certificate-Prompts.aspx Simon.Simon Butler, Exchange MVP Blog | Exchange Resources | In the UK? Hire Me.
Free Windows Admin Tool Kit Click here and download it now
September 12th, 2011 1:42am

Looks like autodiscover is not turn on in the AD. This is fairly new setup. Going to 2 seperate CAS/HUB servers and 2 mailbox servers and a DAG when all is done, but for now we need to fix the certificate. How do I turn on autodiscover? thanks DaveDave Kozlowski
September 12th, 2011 4:41am

These two articles are good: Exchange Autodiscover (Part 1) http://www.msexchange.org/articles_tutorials/exchange-server-2010/management-administration/exchange-autodiscover.html Exchange Autodiscover (Part 2) http://www.msexchange.org/articles_tutorials/exchange-server-2010/management-administration/exchange-autodiscover-part2.htmlMCTS: Messaging | MCSE: S+M
Free Windows Admin Tool Kit Click here and download it now
September 12th, 2011 7:57am

Autodiscover is not something that you can turn on and off. It is part of the Exchange installation. How did you come to the conclusion that autodiscover was "turned off". Have you configured a CAS array? If not then I suggest that you do so before you go any further. Trying to retro fit a CAS array is painful, as each Outlook client needs to be touched to get it to use the CAS array host name rather than the CAS server name. Simon.Simon Butler, Exchange MVP Blog | Exchange Resources | In the UK? Hire Me.
September 12th, 2011 1:03pm

Nothing has been configured as of yet. Just 2 seperate mail servers. One we moved the users to the second we get the certificate error. Now it goes away if we recreate the profile, but we are trying to keep this seemless to the user. Thanks DaveDave Kozlowski
Free Windows Admin Tool Kit Click here and download it now
September 12th, 2011 2:25pm

Regarding autodiscover There is no item in Active Directory Sites and Services for Autodiscover. Should that be configured. Also anyway to tell if the Exchange AD schema has been extended? thanks Dave Kozlowski
September 12th, 2011 3:05pm

You can't install Exchange 2010 without the schema being extended. Therefore if you already have an Exchange server in place then the schema has been extended. What are you expecting to see in AD Sites and Services? Autodiscover doesn't appear in there. When you get the certificate prompt it will tell you what is wrong. My instinct is what I posted above, that you have an Autodiscover war going on. Both CAS servers are publishing their own information for autodiscover and it depends on which server is used depends on whether you get the error or not. If you are going to separate CAS servers and a DAG you must configure a CAS array. If you don't, then you will not get any kind of high availability for the clients to connect. The DAG is only for the mailbox data, it has nothing to do with what the clients connect to. Simon.Simon Butler, Exchange MVP Blog | Exchange Resources | In the UK? Hire Me.
Free Windows Admin Tool Kit Click here and download it now
September 12th, 2011 3:13pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics