EX07 Powershell/cerificate error
Exchange 2007-SP1
I get OWA cetificate error
"The name on the certificate is invalid or does not match the name of the site".
When I use the Exch. powershell get-exchnagecertificate, I receive the error:
Warning:An unexpected error has occurred and debug information is being generated: The type initialzer for 'InstanceContext' threw an exception. at line1 char:23 + get-exchangecertificate.
Also, event viewer shows:
Event ID: 1010
Bucket 274725306, bucket table 5.
AND
Event ID: 5000
EventType e12, P1 c-rtl-amd64, P2 08.01.0240.006, P3 powershell, P4 s.xml, P5 s.x.xmltextreaderimpl.throw, P6 s.xml.xmlexception, P7 cea8, P8 02.00.50727.1433, P9 NIL, P10 NIL.
Please help!!!!
July 14th, 2008 7:28pm
Hi,
From the OWA certificate error, we need first to verify whether a valid certificate has been issued to OWA in Internet Information Services(IIS) manager.
1. Please open Internet Information Services(IIS) manager(Note: Start-Administrative Tools- Internet Information Services(IIS) manager)
2. Find OWA virtual directory under Default Web Site and then right click on it.
3. Please navigate to Directory Security tab, click on View Certificate in Secure communication area.
4. Please check against Issue to on General tab to verify whether it is the same with the site name.(Note: URL for OWA: https://sitename/owa )
5. Please check whether the certificate has a private key.
6. Please remember the Thumbprint(Note: you can find it from the drop-list in Detail tab) of this certificate, we need to find this certificate from certificate MMC.
Then we need to verify this certificate in certificate MMC.
1. Please type MMC from a command prompt.
2. Click File-Add/Remove Snap-in-Add-Certificates-Add-Computer Account-Local computer-Finish.
3. In the console, please check whether it is under Trust Root Certification Authorities
4. Please find the certificate and check whether it is the same as the one for OWA virtual directory.
Meanwhile, I would like to know this issue occurred when you use External URL to access OWA or internal URL.
Besides, please check whether event source of 5000/1010 is Microsoft Exchange Load Generator, please post the detail event information here. Whether you can run other cmdlt in Exchange Management Powershell.
Hope it helps.
Xiu
Free Windows Admin Tool Kit Click here and download it now
July 16th, 2008 10:12am
Thank you for your response!
No, the certificate does not match-
Thsi is a non-split dns sute-
name is https://owa.sitename.org/owa
Exchange shell does not let me use the get-certificate commands.That's when I get:
Event ID: 5000
EventType e12, P1 c-rtl-amd64, P2 08.01.0240.006, P3 powershell, P4 s.xml, P5 s.x.xmltextreaderimpl.throw, P6 s.xml.xmlexception, P7 cea8, P8 02.00.50727.1433, P9 NIL, P10 NIL.
How can I add a correct certificate to Exchange?
Can I safely remove the others?
Thanks!
July 21st, 2008 4:39pm
Hi,
Then please remove the certificate that you do not want from the certificate MMC. And then navigate to the IIS manager.From the default web site- Directory Security, please remove the certificate and install the new certificate.
Or you can use cmdlt to remove the exchagne certificate from the local certificate store:
Remove-ExchangeCertificate -Thumbprint 5113ae0233a72fccb75b1d0198628675333d010e
More information share with you:
Remove-ExchangeCertificate
http://technet.microsoft.com/en-us/library/aa997569(EXCHG.80).aspx
Certificate Use in Exchange Server 2007
http://technet.microsoft.com/en-us/library/bb851505(EXCHG.80).aspx
How to Configure Outlook Web Access Virtual Directories to Use SSL
http://technet.microsoft.com/en-us/library/bb123583(EXCHG.80).aspx
Hope it helps.
Xiu
Free Windows Admin Tool Kit Click here and download it now
July 28th, 2008 12:36pm