Exchange 2010 Certificate question
I had a self signed certificate before, but now that it was time to renew I purchased a certificate from a CA (Comodo).  I used the domain "mail.domain.com"  and installed the certificate and it works externally.  However, when people use Outlook internally they get this message saying their certificate domain does not match the internal server name.  Is there a way for me to suppress this message.  If I install the certificate will this message stop from being received?  I don't know enough about this portion to get this working and any help will be appreciated.  Thanks.
February 11th, 2015 7:36pm

First of all, using Exchange cert with a single name is not the best practice. 

Anyway, since it works externally without any problem, it's possible to make it work internally. There are 2 things you need to take care,

1. From Exchange server side, change all the virtual directory URLs and AutoDiscover URI so that they use the host name of mail.domain.com

2. From internal DNS server, make sure the name mail.domain.com is resolved to your Exchange CAS

Free Windows Admin Tool Kit Click here and download it now
February 11th, 2015 11:40pm

Ohh that is ingenious.  I guess I can put mail.domain.com on the DNS.. and have it resolve to the server.  Let me try.  Thank you.

February 12th, 2015 5:16am

Hi Shedding,

Firstly, please try to view the certificate when you experience this question.
Then check the subject of certificate to double confirm which name isnt contained in certificate.

Then follow the suggestion by Li, double check the internal and external URLs for virtual directory, the host name Outlook Anywhere.
I find an article about Digital certificates and SSL, for your reference:
https://technet.microsoft.com/en-us/library/dd351044(v=exchg.150).aspx

Best Regards,
Allen Wang

Free Windows Admin Tool Kit Click here and download it now
February 13th, 2015 2:30am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics