Two Mail Server's one retired.. SSL Cert issue
I am new at this company and before I started they retired one of thier mail servers. Now the server that is gone "MLEX02" users on VPN are getting a SSL Cert warning that it is expired and to trust the cert. Last month I did renew the SSL Cert on MLEX01.
The configuration I walked into here was that one mail server was up and running MLEX01 but, it has referances on it pointing to a mail server called MLEX02 which is gone.
How do I disable the cert error looking for the server that is gone?
Thanks Marc
June 30th, 2011 8:41am
Clients don't randomly generate certificate prompts. They must be connecting to something with that certificate request.
That either means there is something in their configuration that is using that old server, or the server wasn't removed correctly.
However you haven't provided any version information, so it is hard to say what it could be. Depending on version it could be autodiscover, public folders, OAB distribution. It could be something as silly as a hosts file on the workstations which means they
are connecting to the wrong system.
Not enough information to say for sure.
Simon.Simon Butler, Exchange MVP
Blog |
Exchange Resources | In the UK?
Hire Me.
Free Windows Admin Tool Kit Click here and download it now
June 30th, 2011 1:09pm
Hello,
If it is possible, please collect the following information for research.
[Screenshot of the certificate error in Outlook]
[Collect AutoConfiguration and Connection Status in Outlook]
=========================================
1. While Outlook is running, click the CTRL key and then right-click the Outlook icon in the system tray and then select “Test Email Autoconfiguration”.
2. Confirm that your email address is in the address field, then click the “Test” button.
3. Once it runs, please send me a screen shot of the Results tab and Log tab.
4. Re-click the CTRL key and then right-click the Outlook icon in the system tray and then select “Connection Status”…. Send me a screenshot of
the result.
[Certificate configuration information]
=============================
On CAS server, open “Exchange Management Shell” and type the cmdlet:
Get-ExchangeCertificate |fl >c:\certlog.txt
Get-autodiscovervirtualdirectory | fl >c:\auto.txt
Get-clientaccessserver | fl >c:\cas.txt
Get-Webservicevirtualdirectory |fl >c:\EWS.txt
You can reach me at:
v-simwu@microsoft.com
Thanks,
Simon
July 3rd, 2011 10:24pm