Leopard/Keychain/Exchange

  • Thread starter Christopher Boerger
  • Start date
C

Christopher Boerger

I am unable to get Entourage 2004 to connect securely to our Exchange 2003
server. It tells me "Unable to establish a secure connection to <servername>
because the root certificate is not installed.

I imported both our Exchange server's .crt and .pfx files into Keychain.
Microsoft Cert Manger is displaying both of the files as well.

Running OS X 10.5, and Entourage 11.3.6. I am tolod our Echange 2003 server
is fully up to date.

Please help if you can, I am under a lot of pressure to get this working in
an environment that already dislikes Macs.

Chris
 
W

William Smith

Christopher said:
I am unable to get Entourage 2004 to connect securely to our Exchange 2003
server. It tells me "Unable to establish a secure connection to <servername>
because the root certificate is not installed.

I imported both our Exchange server's .crt and .pfx files into Keychain.
Microsoft Cert Manger is displaying both of the files as well.

Running OS X 10.5, and Entourage 11.3.6. I am tolod our Echange 2003 server
is fully up to date.

Please help if you can, I am under a lot of pressure to get this working in
an environment that already dislikes Macs.
Click to expand...

Hi Chris!

I have nothing conclusive for you but I have seen conversations
elsewhere with some knowledgeable folks who are finding certificate
support with Entourage to be broken in Leopard.

One piece of advice I can give you now is to make sure under Leopard
that you're importing into your Login keychain.

Hope this helps!

--

bill

William M. Smith, Microsoft Interop MVP - Mac/Windows
Entourage Help Page <http://entourage.mvps.org/>
Entourage Help Blog <http://blog.entourage.mvps.org/>
 
C

Christopher Boerger

Hi Chris!

I have nothing conclusive for you but I have seen conversations
elsewhere with some knowledgeable folks who are finding certificate
support with Entourage to be broken in Leopard.

One piece of advice I can give you now is to make sure under Leopard
that you're importing into your Login keychain.

Hope this helps!
Click to expand...

I believe you may be right. I have it imported in my login Keychain to no
avail. Later on, I booted into my 10.4.10 backup I made before upgrading to
Leopard and importing the cert into the Tiger X509Anchor Keychain works. The
Entourage warning goes away.

I've never had to pay to be a part of a beta testing program before (esp.
$129) but Leopard seems to be working out that way.

Thanks for the response.
 
C

Corentin Cras-Méneur

Christopher Boerger said:
I imported both our Exchange server's .crt and .pfx files into Keychain.
Microsoft Cert Manger is displaying both of the files as well.
Click to expand...

Are they showing up in your login keychain in Keychain.app as well??

If not, try gdragging them to Keychain.app to import them in login.

You can also try to run Keychain forst aid from teh menus of
Keychain.app,

Corentin
 
C

Christopher Boerger

I believe you may be right. I have it imported in my login Keychain to no
avail. Later on, I booted into my 10.4.10 backup I made before upgrading to
Leopard and importing the cert into the Tiger X509Anchor Keychain works. The
Entourage warning goes away.

I've never had to pay to be a part of a beta testing program before (esp.
$129) but Leopard seems to be working out that way.

Thanks for the response.
Click to expand...
It's official:
http://blog.entourage.mvps.org/2007/11/leopard_update_breaks_entourage_suppo
rt_for_exchange_ssl_roo.html

Apple released Mac OS X 10.5 (Leopard) a week ago and for the most part
Entourage 2004 is ³very compatible² according to There's a new cat in town
on Microsoft¹s Mac Mojo blog. However, they also acknowledge that they
discovered some code in their Leopard testing and will be releasing an
update ³shortly².

Most of the Entourage trouble reports that I¹ve read in the Apple and
Microsoft online forums are anecdotal but one Exchange bug seems to be
validating.

This bug affects users in an Exchange environment where users must import an
SSL server root certificate into their Mac OS X keychain. The error reported
by Entourage is that the root certificate is not correct. A valid
certificate appears in the Keychain Access utility as trusted and unexpired.

Whereas Mac OS X 10.4 users could acquire the server certificate and import
it into their x509Anchors, Mac OS X 10.5 users can now import the
certificates into the user¹s login keychain and the system will trust it.
Entourage, however, is not trusting the server.

Although Apple released the Login & Keychain Update 1.0 the day after
Leopard¹s release, it does not address the certificate issue.
 
Top