Unable to load certificate and Warning error with event id 12035

zaid Shaikh 41 Reputation points
2020-09-04T12:53:03.573+00:00

We are archiving emails to one of our partner company via Journal rules and send connector.

Created journal rules and dedicated send connector for partner organization.

This doesn’t not require any other setup on our exchange and we are getting certificate error in our event viewer for partner's smart host URL.

Journal address: All_Emails@journal.xxx.partnercompany.net
Smart host: journal.xxx.partnercompany.net

Emails are getting archived to partner's organization however we are getting below event log in exchange server.

We have also checked with our partner and they don’t have issues.

Exchange Version : 2016.
Log Name: Application
Source: MSExchangeTransport
Event ID: 12035
Task Category: TransportService
Level: Error
Keywords: Classic
User: N/A
Computer: XXX-EXCH-2016.com

Description:

Exchange was unable to load certificate journal.xxx.partnercompany.net. More information: Is FrontEnd Proxy enabled: false. Original backend Server: journal.xxx.partnercompany.net. Send Connector Name from the original request: Journaling Connector Ex2016.

Exchange Server Management
Exchange Server Management
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Management: The act or process of organizing, handling, directing or controlling something.
7,345 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Ashok M 6,506 Reputation points
    2020-09-04T13:27:47.32+00:00

    Hi,

    Based on the error message, Exchange is looking for the certificate for the name "journal.xxx.partnercompany.net" which is the smarthost in the SendConnector. Please check if the certificate for "journal.xxx.partnercompany.net" is installed on the certificate personal store on the exchange server. If yes, check the validity and If not, install it.

    Get the list of certificates using Get-ExchangeCertificate

    Get the thumbprint and enable the SMTP service using the below command

    Enable-ExchangeCertificate -Thumbprint <String> -Services SMTP


  2. Lydia Zhou - MSFT 2,371 Reputation points Microsoft Employee
    2020-09-07T03:07:22.38+00:00

    anonymous userShaikh

    Can messages be sent successfully through this send connector?
    Which smart host authentication do you configure for your send connector?

    If you choose the basic authentication, and select "Offer basic authentication only after starting TLS", a certificate on the smart host is needed and it contains the FQDN of the smart host that's defined on the Send connector. You can unselect "Offer basic authentication only after starting TLS" to see if the issue persists.
    For your reference: Use the EAC to create a Send connector that uses smart host routing.


    If the response is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.