My network environment has ISA and exchange server 2010, when I use a new certificate in my ISA and exchange CAS server and when I navigate to the OWA page form our client machine, we can get to the login page but after logging in we get an error page with the following message "Error Code: 500 Internal Server Error.  The signature of the certificate cannot be verified. (-2146869244)".

Please help me ASAP. Your cooperation will be highly appreciated.

Thanks

Babu

Hi Satyajit, 

I have used it in my ISA and Exchange CAS server, when if I use this new certificate only in my ISA server it work fine but if I use this certificate in both ISA and Exchange CAS server it create the below problem: 

"Error Code: 500 Internal Server Error.  The signature of the certificate cannot be verified. (-2146869244)"

for your kind information my new certificate key length is RSA (2048 Bits)

Thanks.

Hi Babu,

Thank you for your update. I get that you are planning to use this cert on both ISA and CAS.

I know that these are basic question which you might have already done, but just to ensure we don't miss anything let me ask again, how and from where did you issue(Generate) this certificate.

Please let me know if you followed procedures similar to the below links, if not please try and let us know:

Renew an Exchange 2010 SSL Certificate Using the GUI:

https://www.digicert.com/ssl-certificate-renewal-exchange-2010.htm

Renew an Exchange Certificate:

https://technet.microsoft.com/en-in/library/ee332322(v=exchg.141).aspx

What I'm try to find is if Generation was from Exchange Console and Services are assigned to the certificate within Exchange. And not using IIS Manager or anything else.

What do you mean my only ISA works and both doesn't work. When only ISA, what certificate does CAS has at that point. Once you add the cert to CAS how are you removing it for only ISA to work.