Hello, why is it that from exchange connectivity website Outlook Anywhere rpc over http test fails with this error: ( while Activesynch autodiscover works fine ) is the autodiscover different for outlook anywhere ? The Autodiscover service couldn't be contacted successfully by any method

Hi, Your SSL Certificate mayn't be having autodiscover.yourdomain.com on it. Please check itRegards from www.windowsadmin.info

how can I check which addresses are bound to the ssl certificate which is a self signed certificate from a local DC pls

On Thu, 13 Jan 2011 18:35:15 +0000, acmsoft wrote: >how can I check which addresses are bound to the ssl certificate which is a self signed certificate from a local DC pls You can see the names in the certificate by using the MMC and addint the "Certificates" snap-in. Make sure you select the "Computer" account and the "local machine". You should find the certificate in the "Personal \ Certificates" container. select the cert and open it. From there you can examine the details. Or, you can run 'get-exchangecertificate' to get the certificate's thumbprint and then "get-exchangecertificate <thumbprint> |fl" and you should see the certificate's details. --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP

yes in fact it does not have the autodiscover entry, how can I add another address, is it possible ?

On Fri, 14 Jan 2011 15:17:47 +0000, acmsoft wrote: >yes in fact it does not have the autodiscover entry, how can I add another address, is it possible ? Since you generate your own certifdicates there shouldn't be any reason why you can't create a new CSR and just get a new certificate to replace the one you're using now. --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP

Hello, I re-created one including the autodiscover.domain.com however I still got the same error. when checking get-exchangecertificate with the thumbnail it only shows you the CN=domain.com and not all the other addresses including the autodiscover

Hello, I re-created one including the autodiscover.domain.com however I still got the same error. when checking get-exchangecertificate with the thumbnail it only shows you the CN=domain.com and not all the other addresses including the autodiscover Also does Outlook Anywhere works only when there is an official trusted certificate or I can use my CA to be used with Outlook Anywhere ?

On Sat, 15 Jan 2011 11:44:01 +0000, acmsoft wrote: > > >Hello, > > > >I re-created one including the autodiscover.domain.com however I still got the same error. > > > >when checking get-exchangecertificate with the thumbnail it only shows you the CN=domain.com and not all the other addresses including the autodiscover Did you use: get-exchangecertificate <thumbnail> | FL If you did, the names are in the "CertificateDomains" property. If you see only one name then either the CSR is incorrect or the CA you're using isn't set up to generate SAN certificates. Visit this URL and fill out the information. It'll create the new-exchangecertificate cmdlet for you: https://www.digicert.com/easy-csr/exchange2007.htm Use the CSR you get from running that cmdlet to request the certificate from your CA. If you can't generate a SAN certificate you should ask for help in the O/S forums to figure out why. >Also does Outlook Anywhere works only when there is an official trusted certificate or I can use my CA to be used with Outlook Anywhere ? It will work with a certificate created by any CA the host O/S has been instructed to trust. You'll have to add your CA's root (and maybe intermediate) certificate to the trusted root/intermediate certificate store on each client system. --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP

Rich when I did the setup of Exchange 2010 for the Certificate I was shown several different urls including autodiscover where I had the option to choose which services I want to use and specify their urls. The autodiscover for Activesynch is working fine when tested from Exchange connectivity. The only failing is the RPC over HTTP test for Outlok Anywhere with the below: Certificate trust validation failed. Additional Details The certificate chain couldn't be built. You may be missing required intermediate certificates.

On Sun, 16 Jan 2011 05:46:35 +0000, acmsoft wrote: > > >Rich when I did the setup of Exchange 2010 for the Certificate I was shown several different urls including autodiscover where I had the option to choose which services I want to use and specify their urls. > >The autodiscover for Activesynch is working fine when tested from Exchange connectivity. > >The only failing is the RPC over HTTP test for Outlok Anywhere with the below: > > > >Certificate trust validation failed. Additional Details The certificate chain couldn't be built. You may be missing required intermediate certificates. If you're using your own CA to issue certificates and that CA isn't accessible from the Internet, then any test you run from the Internet is going to fail. You need to install the intermediate certificate from your CA on the CAS server(s) and on the clients that use that certificate (just as you have to add the CA root certificate). --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP