Hi,

I had already posted in the TechNet forums and was asked to post here since we made some progress but they were not able to resolve the issue 100%.

We've got one end-user out of 65 getting a certificate error when starting outlook 2010. It says ourexchangeservername.ourdomain in the title bar. Below that, it says "info you exchange with this site cannot be viewed" etc.  Below that, the red x is next to "The security certificate was issued by a company you have not chosen to trust" etc. and there's a green check next to both  "The security certificate is valid" and The security certificate has a valid name". He clicks yes to proceed and the same error comes up again. Click yes again, it goes away and outlook functions normally. In cert manager, I see it in two places, under Trusted root certification authorities>certificates, and under Other people>certificates. I'm guessing these correspond to the two clicks on the yes button he must do? I deleted them but he still gets the prompt. Is there another place these are coming from, and should I install to another section of cert manager? If it's the server, how come only one guy is suffering?

Any help appreciated, thanks!

Hi,

I had already posted in the TechNet forums and was asked to post here since we made some progress but they were not able to resolve the issue 100%.

We've got one end-user out of 65 getting a certificate error when starting outlook 2010. It says ourexchangeservername.ourdomain in the title bar. Below that, it says "info you exchange with this site cannot be viewed" etc.  Below that, the red x is next to "The security certificate was issued by a company you have not chosen to trust" etc. and there's a green check next to both  "The security certificate is valid" and The security certificate has a valid name". He clicks yes to proceed and the same error comes up again. Click yes again, it goes away and outlook functions normally. In cert manager, I see it in two places, under Trusted root certification authorities>certificates, and under Other people>certificates. I'm guessing these correspond to the two clicks on the yes button he must do? I deleted them but he still gets the prompt. Is there another place these are coming from, and should I install to another section of cert manager? If it's the server, how come only one guy is suffering?

Any help appreciated, thanks!

Who issued the cert for your company? Also did you check to see if this company Root Cert shows up in the trusted root store on both the computer profile and his user account profile?

Hi Hinte,

Who issued the cert? When I look in cert manager it says it was issued by us, the syntax is

ourdomain-ourdomaincontroller-CA

When you ask if the company root cert shows up in the trusted root store on both computer profile and user account profile, I'm not sure what you mean so I'll try to answer as best I can. The cert shows up in Trusted Root certification authorities>certificates in cert manager. Profile-wise, I'm logged in as him on his computer so it's his windows profile, not sure what you mean by computer profile.

• Edited by pjb515 5 hours 47 minutes ago

Hi Hinte,

Who issued the cert? When I look in cert manager it says it was issued by us, the syntax is

ourdomain-ourdomaincontroller-CA

When you ask if the company root cert shows up in the trusted root store on both computer profile and user account profile, I'm not sure what you mean so I'll try to answer as best I can. The cert shows up in Trusted Root certification authorities>certificates in cert manager. Profile-wise, I'm logged in as him on his computer so it's his windows profile, not sure what you mean by computer profile.

• Edited by pjb515 Tuesday, March 31, 2015 1:36 AM

Hi Hinte,

Who issued the cert? When I look in cert manager it says it was issued by us, the syntax is

ourdomain-ourdomaincontroller-CA

When you ask if the company root cert shows up in the trusted root store on both computer profile and user account profile, I'm not sure what you mean so I'll try to answer as best I can. The cert shows up in Trusted Root certification authorities>certificates in cert manager. Profile-wise, I'm logged in as him on his computer so it's his windows profile, not sure what you mean by computer profile.

• Edited by pjb515 Tuesday, March 31, 2015 1:36 AM

Hi Hinte,

Who issued the cert? When I look in cert manager it says it was issued by us, the syntax is

ourdomain-ourdomaincontroller-CA

When you ask if the company root cert shows up in the trusted root store on both computer profile and user account profile, I'm not sure what you mean so I'll try to answer as best I can. The cert shows up in Trusted Root certification authorities>certificates in cert manager. Profile-wise, I'm logged in as him on his computer so it's his windows profile, not sure what you mean by computer profile.

• Edited by pjb515 Tuesday, March 31, 2015 1:36 AM

Hi,

From your description, this issue only occurs for one user. I recommend you check if the certificate is installed correctly on the client. To do this, follow these steps:

1. Start Windows Internet Explorer.
2. On the Tools menu, click Internet Options.
3. On the Content tab, click Certificates.
4. In the Certificates dialog box, click the Trusted Root Certification Authorities tab.
5. Scroll down the list of installed certificates to locate the certificate for your server.

Hope this can be helpful to you.

Best regards,

Hi Amy,

I looked in internet options, it's not there. I thought that was just another way to look at certificate manager (certmgr.msc) but when I looked in there, the cert is present. So what is the difference between the certs I see at IE options and the ones in certificate manager?

I fixed it and wanted to post the info in case anyone experiences the same thing. The certs you see in Certificate Manager don't seem to be the same as what you see in Internet Explorer options. Since the end user had the cert in Cert Mgr. I thought it was something else but eventually decided to export the cert from Cert Manager>Trusted Root Cert Auth>Certs and go to the certs in the Internet Options, import to the same place and no more security prompt. Yay!  I'd still like to know what the difference is between the two places so if someone could explain that I'd appreciate it.