Forum Discussion
Lussy150
Jan 19, 2023Copper Contributor
"The name on the security certificate is invalid..." After changing to trusted CA and updating VDs
Hello,
This is with Exchange 2019.
after changing the virtual directories to mail.domain.com (from mail.domain.local) and applying the appropriate certificate, when starting Outlook, the following message pops up (the blacked out part is still showing the old mail.domain.local instead of the mail.domain.com):
Exactly what is described here: https://www.youtube.com/watch?v=arhOzkEAog4
However, the solution displayed in the Youtube video did not help in this situation.
Clicking 'Yes' will open Outlook and email works as usual.
This error has also briefly made an appearence, though it has only happened the first 5-10 minutes after making the changes, so probably something had to update in the background first:
Not sure anymore what else to do to resolve the issue in the first screenshot. Any help much welcome! (thinking somewhere is still a wrong URL set...RPC maybe...Outlook anywhere...but I checked all those),
The new cert common name: mail.domain .com.
SANs: autodiscover.mail.com, domain.com, mail.domain.com
Cheers,
- Dan_SnapeSteel ContributorHave you checked the value for your SCP record (get-clientaccessservice | select *uri*)? Make sure the value is configured with one of the domains in the certificate
- Lussy150Copper ContributorYes, I did update the SCP record to try to fix it. However after updating it, Autodiscovery still worked but Outlook started prompting for credentials over and over and over...
- Dan_SnapeSteel ContributorI'd look to go through each virtual directory on all servers and make sure the internal and external URI are using the name in the certificate. Make sure that internal and external DNS and your network configuration are pointing that namespace at the correct Exchange server. Also check that the authentication settings are correct for each virtual directory. Once that's completed, do a reboot of the Exchange servers.