Exchange 2007 Self-Signed Certificates and Outlook 2010
We have a few machines running Office 2010 in our domain connecting to an Exchange 2007 server. We've noticed that when we startup Outlook 2010, we receive a cert warning that our Outlook 2007 users do not get. It's a Security Alert from our Exchange self-signed cert and it says"The security certificate was issued by a company you have not chosen to trust. view the certificate to determine whether you want to trust the certifying authority."What's the best way to work with this? Should we deploy the cert in a Group Policy to all the systems with Outlook 2010 on them? Can we add the servername as a trusted server?Orange County District Attorney
February 4th, 2010 6:56pm
Hi there,If the certificate is coming from your own internal CA, then it should be trusted, so I presume this is the default self signed Exchange Cert?Are the machines with Outlook 2010 on new? I would imagine you have selected to trust the certificate for the other machines.Here's a good guide on installing self signed certs: http://hellomate.typepad.com/exchange/2004/07/this_security_c.htmlOliverOliver Moazzezi | Exchange MVP, MCSA:M, MCTS:Exchange 2010, BA (Hons) Anim
| http://www.exchange2007.com | http://www.exchange2010.com | http://www.cobweb.com |
Free Windows Admin Tool Kit Click here and download it now
February 4th, 2010 7:52pm
The cert was generated from our Exchange Server itself. I discovered some notes on exporting the cert from our Exchange server and then deploying via GPO. Since we only have 5 systems (new ones) running Outlook 2010, we're going to just manually install the cert on each system for now. We're going to work on developing the GPO for eventual use on Outlook 2010 when it's RTM. Thanks for the link too.Orange County District Attorney
February 4th, 2010 8:15pm
The cert was generated from our Exchange Server itself. I discovered some notes on exporting the cert from our Exchange server and then deploying via GPO. Since we only have 5 systems (new ones) running Outlook 2010, we're going to just manually install the cert on each system for now. We're going to work on developing the GPO for eventual use on Outlook 2010 when it's RTM. Thanks for the link too.
Orange County District Attorney
Cool, glad you got it sorted.Take care,OliverOliver Moazzezi | Exchange MVP, MCSA:M, MCTS:Exchange 2010, BA (Hons) Anim
| http://www.exchange2007.com | http://www.exchange2010.com | http://www.cobweb.com |
Free Windows Admin Tool Kit Click here and download it now
February 4th, 2010 8:18pm