SSL not working on a CAS
Greetings.
I am trying to get a SAN SSL cert purchased from godaddy to work on exchange 2010. I exported this cert from one server and was succesful in getting it to work with 2 other CAS servers but with this one it says "The certificate is invalid for
exchange." When issuing the command get-exchangecertificate I get
AccessRules :
CertificateDomains : {mail.domainname.com, www.mail.domainname.com, email.domainname.com, webemail.domainame.com, autodiscover.domainname.com}
HasPrivateKey : True
IsSelfSigned : False
Issuer : SERIALNUMBER=(NotSent), CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.
com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US
NotAfter : 10/29/2011 12:48:37 AM
NotBefore : 10/29/2010 12:48:37 AM
PublicKeySize : 2048
RootCAType : Unknown
SerialNumber : (Not Sent)
Services : None
Status : Invalid
Subject : CN=mail.domainname.com, OU=Domain Control Validated, O=mail.domainname.com
Thumbprint : (NOT SENT)
AccessRules :
CertificateDomains : {Servername, Servername.domainname}
HasPrivateKey : True
IsSelfSigned : True
Issuer : CN=ServerName
NotAfter : 10/20/2015 4:15:37 PM
NotBefore : 10/20/2010 4:15:37 PM
PublicKeySize : 2048
RootCAType : None
SerialNumber : (NOT SENT)
Services : IMAP, POP, IIS, SMTP
Status : Valid
Subject : CN=ServerName
I did try to install the intermediates godaddy provided even though it was not required for the other 2 servers. All servers are 2008 R2.
How can I tell why the rootcattype is Unkown. On the servers it is working on it says 3rd party.
Thanks
Joe
October 30th, 2010 11:45pm
Hi
Did you export the certificate with the private key?
That needs to be done, and check for the intermediate certificates
Also check the certificates path from the server that it works on, with root and intermediate certificate(s)Jonas Andersson MCTS: Microsoft Exchange Server 2007/2010 | MCITP: EMA 2007/2010 | MCSE/MCSA Blog:
http://www.testlabs.se/blog
Free Windows Admin Tool Kit Click here and download it now
November 1st, 2010 7:09am