Certificate error

[ShawnRasmussen]

Version: 2008
Operating System: Mac OS X 10.4 (Tiger)
Processor: Power PC
Email Client: Exchange

I am trying to configure Entourage 2008 (on Tiger) to connect to Small Business Server 2008. After much coaxing it appears everything is working except I get this error 1 time when Entourage starts up:

Unable to establish a secure connection to domain.com because a certificate on the server's certificate chain has expired or is not yet valid. Please check that your computer's clock is set to the correct time.

Well, needless to say I have checked the time on the Mac, the server and the valid dates on the certificate and everything seems fine. I started with the self-signed certificate created by SBS and when I couldn't get that to work I tried a GoDaddy cert, but that doesn't work either. I've put the cert in about every keychain possible and nothing seems to make this stop.

Anyone have any ideas?

 

[Corentin Cras-Méneur]

Well, needless to say I have checked the time on the Mac, the server and
the valid dates on the certificate and everything seems fine. I started
with the self-signed certificate created by SBS and when I couldn't get
that to work I tried a GoDaddy cert, but that doesn't work either. I've
put the cert in about every keychain possible and nothing seems to make
this stop.

Which certificate did you put in the keychain?? You need the root
certificate there.
Do you also get the warning if you connect through a web-browser to your
OWA page??

Corentin

 

[ShawnRasmussen]

I've tried 2 different certificates. The one in there now is the one I downloaded from GoDaddy and installed on the SBS. The first one was the one that was stored in the Public share on the SBS (it's meant to be installed on client machines or mobile devices). That was before up put the new trusted cert in, however.

 

[ShawnRasmussen]

When I go to the OWA login page in Safari I do not get an error if I use the public domain address. If I use the internal domain address, I do get the error. But that's kind of what I would expect. The certificate is for the server's external host name.

 

[William Smith [MVP]]

When I go to the OWA login page in Safari I do not get an error if I
use the public domain address. If I use the internal domain address,
I do get the error. But that's kind of what I would expect. The
certificate is for the server's external host name.

I suggest you post your message in either the SBS newsgroup
microsoft.public.windows.server.sbs or in the Exchange admin newsgroup
microsoft.public.exchange.admin.

Someone there may be able to verify that you've installed your
certificate correctly.

Hope this helps!

--

bill

Entourage Help Page <http://entourage.mvps.org/>
Entourage Help Blog <http://blog.entourage.mvps.org/>
YouTalk <http://nine.pairlist.net/mailman/listinfo/youtalk>
Twitter: follow <http://twitter.com/meck>