few week's ago i migrate exchange 2010 to Exchange 2013 and  remove/unistall old Exchange server,  today some of my users told me that when they start Outlook 2013  this certificate warning popup comes up

i cannot find this certificate anywhere, where come from this certificate?  and how change i fix this issue? 

Do you have a web balancer or web proxy device between the clients and Exchange that might be doing SSL offloading or inspection?

Check all URLs within Exchange are pointing to the correct place - they are not all exposed to the GUI in ECP, some are shell only.

As this is startup of Outlook, I would expect that the AutodiscoverServiceInternalURI value isn't correct.

http://semb.ee/hostnames2013

Simon.

One thing you might check.  If your company's web site is configured to respond to https://company.com/Autodiscover/Autodiscover.xml, you can end up with certificate errors when Outlook tries this URL.  The fact that nobody in the world published Autodiscover with this URL doesn't stop Outlook from trying it before trying the correct ones.  However, this problem should only happen with external clients unless you've misconfigured Set-ClientAccessServer -AutodiscoverServiceInternalUri.

Hi,

Please post the warning content in details.

You can run the following command to check your certificate settings and autodiscover service on Exchange server:
Get-ExchangeCertificate | fl

Get-ClientAccessServer | FL Identity,AutodiscoverServiceInternalUri 

Regards,

David

Hi,

Please post the warning content in details.

You can run the following command to check your certificate settings and autodiscover service on Exchange server:
Get-ExchangeCertificate | fl

Get-ClientAccessServer | FL Identity,AutodiscoverServiceInternalUri 

Regards,

David

• Proposed as answer by David Wang_Microsoft contingent staff 7 hours 54 minutes ago

Hi,

Please post the warning content in details.

You can run the following command to check your certificate settings and autodiscover service on Exchange server:
Get-ExchangeCertificate | fl

Get-ClientAccessServer | FL Identity,AutodiscoverServiceInternalUri 

Regards,

David

• Proposed as answer by David Wang_Microsoft contingent staff, Moderator Tuesday, August 25, 2015 11:37 PM

i have TMG but i have wildcard certificate and tmg and other servers use this certificate

i check autodicover and it uses a correct sertificate 

Is that the host name that is returned from the command already suggested above?

You need to ensure that the name resolution is correct. I cannot find any reference to the issued by/to that you have posted, which suggests it is something either internal or someone has done on their own.

Simon. 

We started getting this too.  I believe only our iPhone users with the new iPhone app are getting it.

some of our users have this problem,  not to all,

hostname is correct and i canonot determin where this certificate came from