MSExchangeTransport Event 12014 START TLS issue
I have an issue with getting 12014 errors. I get them about every 15-20 minutes or so. This has been happening ever since the server is setup. Everything is working fine so it seems cosmetic, but I would like to resolve the error so it
doesn't fill up my event log.
Error:
Microsoft Exchange could not find a certificate that contains the domain name exchange.butlermachinery.com in the personal store on the local computer. Therefore, it is unable to support the STARTTLS SMTP verb for the connector * with a FQDN parameter of
exchange.butlermachinery.com. If the connector's FQDN is not specified, the computer's FQDN is used. Verify the connector configuration and the installed certificates to make sure that there is a certificate with a domain name for that FQDN. If this certificate
exists, run Enable-ExchangeCertificate -Services SMTP to make sure that the Microsoft Exchange Transport service has access to the certificate key.
Single server, running 2007 Exchange SP2 RU5 EE , Windows 2008 SP2 EE
Thanks!
February 11th, 2011 3:07pm
The error means what it says. The server cannot find a certificate with the FQDN value specified in the certificate store.
That usually means the SSL certificate isn't a UC type with the additional names, or it is, but none of those names are the FQDN on the connector specified.
To fix - get a certificate with the name included, or change the FQDN on the Connector.
If you haven't deployed a commercial SSL certificate then I have instructions on my blog here:
http://blog.sembee.co.uk/post/Exchange-2007-and-SSL-Certificates-Take-2.aspx
Simon.Simon Butler, Exchange MVP
Blog |
Exchange Resources | In the UK?
Hire Me.
Free Windows Admin Tool Kit Click here and download it now
February 11th, 2011 6:43pm
Hi,
More information about this error, please refer the following link:
How to Troubleshoot STARTTLS Certificate Error 12014
http://technet.microsoft.com/en-us/library/bb510128(EXCHG.80).aspx
Gen Lin
TechNet Subscriber Support in forum
If you have any feedback on our support, please contact
tngfb@microsoft.com
Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. Thanks Gen Lin-MSFT
February 13th, 2011 9:34pm