question

alangao-5587 avatar image
0 Votes"
alangao-5587 asked ZhengqiLou-MSFT commented

certificate popup on outlook

I reinstalled an exchange server and now when outlook starts, it popup an mes82602-img-2471.jpg82586-img-2474.jpgsage saying the certificate isn't trusted. What could be wrong? I have installed a correct certificate with right name on the server.


82507-img-2474.jpg


office-exchange-server-administration
img-2471.jpg (106.7 KiB)
img-2474.jpg (106.2 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

alangao-5587 avatar image
0 Votes"
alangao-5587 answered ZhengqiLou-MSFT commented

I already purchased a certificate from Network Solution so it is trusted. The cert I am talking about is the Microsoft Exchange Certificate (highlighted in Yellow). It is auto issued to local exchange server. 82930-capture.png

Is this cert used by Exchange Backend IIS? Does it need to be installed Trusted Cert Store?



capture.png (119.2 KiB)
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi @alangao-5587 ,

Yes, by default this certificate should be used both frontend and backend. Also it will automatically installed in your Exchange server's trusted root.
Oh I guess you're using outlook from another computer not where Exchange installed right? Then you could also install this certificate to the root to avoid it.

Regards,
Lou

0 Votes 0 ·
ZhengqiLou-MSFT avatar image
0 Votes"
ZhengqiLou-MSFT answered

Hi @alangao-5587 ,

Have you installed the certificate to the Trusted Root Certificate Auth?
You could click Install Certificate from the first picture and choose Local Machine then Browse the root.
83017-image.png
Then restart IIS.

This may help you: How to use a internal Windows CA (Certificate Authority) in Windows 2012 with Exchange 2013
Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.

Regards,
Lou


If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.



image.png (22.6 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

alangao-5587 avatar image
0 Votes"
alangao-5587 answered ZhengqiLou-MSFT commented

the outlook is on anther computer other than where exchange is installed. There are thousand of clients outlook, I can't install it one by one for each and every PC. Is there a way to install it so very computer will trust it? It is in a domain enviroment.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi @alangao-5587 ,

Then you should use the Business Certificate that you've paid for, since the self-signed certificates are not trusted by other clients.

You should Import or install a certificate on an Exchange server then Assign certificates to Exchange Server services. So Exchange will use this cert for authentication.

Also after this, check the IIS https bindings for both FrontEnd and BackEnd.

0 Votes 0 ·
alangao-5587 avatar image
0 Votes"
alangao-5587 answered ZhengqiLou-MSFT commented

I have installed a business certificate and bind to the IIS service.

· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi @alangao-5587 ,

Have you ever imported this certificate to Exchange and assigned services?
Only after you assigned services will Exchange use this certificate for it's functions.
Also please check if he certificate SAN has include your mailbox & CAS server and it should be used on both servers.

After assigned the certificate:
83471-image.png

Regards,
Lou

0 Votes 0 ·
image.png (28.2 KiB)

Hi @alangao-5587 ,

Do the suggestions above help? If the issue has been resolved, please click “Accept as answer” to mark helpful reply as an answer, this will make answer searching in the forum easier and be beneficial to other community members as well.

Regards,
Lou


If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

0 Votes 0 ·