Certificate is invalid error
I just installed a new Exchange 2013 test server. When I open Outlook on clients I received the following error:
"The name of the security certificate is invalid or does not match the name of the site"
I am using internal certificate and NOT using a third-party certificate.
I have seen this issue resolved in the forums for previous versions of Exchange but not for Exchange 2013. The only information I could get was that the issue is now resolved in the web Admin Center but no details on how.
Please help. Thanks.
November 28th, 2012 12:59pm
When you see this error, it will show you the name of the server. Check if the name is on the certificate.
Thank you.
Please Vote As Helpful and/or Mark As Answer if this post helped you.
Free Windows Admin Tool Kit Click here and download it now
November 28th, 2012 2:12pm
Are you using internal as in a internal CA or the Exchange Self-Signed certificates?
Which address do you use when connecting to Exchange, and what names are on the certificate?
Are the client you are using part of the same domain as the Exchange server/s?
Does the client trust the issuing CA of the certificate?stefan@xperta
November 28th, 2012 2:50pm
The name of my Exchange server is on it (not my domain controller though).
Free Windows Admin Tool Kit Click here and download it now
November 28th, 2012 5:47pm
The name of my Exchange server is on the certificate. Should this have been the name of my domain controller?
I did not have the CA role installed on my domain controller when I installed Exchange (this could have been my big mistake). I have the role installed now.
The client is in my domain.
At first, the client did not trust the certificate. I had to install it on the machine first. Now it trusts.
I would like to use internal CA as I believe this is the proper thing to do- correct?
November 28th, 2012 5:58pm
As far as I understand, you have a self signed certificate installed. This is your problem. You have to create a domain certificate.
If you are using outlook only internally, you could use the internal certificate. If you want to use Outlook ouside of the firewall and not only domain computer, you'd better have the public certificate.
In any case, do not use self signed certificate.
Thank you.
Please Vote As Helpful and/or Mark As Answer if this post helped you.
Free Windows Admin Tool Kit Click here and download it now
November 28th, 2012 6:01pm
As Igor points out, you will want to use another type of certificate.
http://exchangeserverpro.com/exchange-2013-ssl-certificate-private-certificate-authority
stefan@xperta
November 28th, 2012 6:41pm
That was it! Thanks a lot Stefan for your quick response and accurate resolution.
Free Windows Admin Tool Kit Click here and download it now
November 28th, 2012 11:13pm
That was it! Thanks a lot Igor for your quick response and accurate resolution.
November 28th, 2012 11:14pm