I installed Exchange 2010 on an isolated lab network without Internet access. windows 2008 x64. When I tried to install a wildcard certificate from Digicert, I got this error: The certificate status could not be determined because the revocation check failed. I've seen kb article 979694 which refers to a proxy server. We don't have a proxy server. When I run the netsh winhttp show proxy command from that article, I get: Direct access <no proxy server>. So I'm guessing that the certificate needs to go out to the internet to get validated It can't get out, so I get this error. I did not get this error installing a certificate on an Exchange 2003 IIS certificate on the same isolated subnet. Please help.

Yes by design you have to disable the revocation check. Configuring Exchange Servers Without Internet Access http://blogs.technet.com/b/exchange/archive/2010/05/14/3409948.aspxJames Chong MCITP | EA | EMA; MCSE | M+, S+ Security+, Project+, ITIL msexchangetips.blogspot.com

By the way, if this is an isolated lab for test only, a self-signed certificate or internal CA one is enough. More information about Exchange certificate: Certificate Use in Exchange Server 2007 http://technet.microsoft.com/en-us/library/bb851505(EXCHG.80).aspx Frank Wang TechNet Subscriber Support in forum If you have any feedback on our support, please contact tngfb@microsoft.com Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hi MangroveGuy, Any updates?Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

You can assign a self assinged cerificate http://technet.microsoft.com/en-us/library/bb851505(EXCHG.80).aspx

Hi MangroveGuy, Any updates?Frank Wang