Root Certificates in Entourage 2004

[digpower]

I have Entourage 2004 installed and connecting to a SBS 2003 server via
Exchange. Entourage connects to the server and retrieves my messages
but everytime I launch the program it gives me an error "Unable to
establish a secure connection because the correct root certificate is
not installed". I have looked at other posts in the group and tried
pretty much everything without any success. Can anyone point me in the
right direction...this is very annoying.

Thanks,
Chad

 

[Corentin Cras-Méneur]

I have Entourage 2004 installed and connecting to a SBS 2003 server via
Exchange. Entourage connects to the server and retrieves my messages
but everytime I launch the program it gives me an error "Unable to
establish a secure connection because the correct root certificate is
not installed". I have looked at other posts in the group and tried
pretty much everything without any success. Can anyone point me in the
right direction...this is very annoying.

Just so that I understand exactly what's going on: Did you get the root
certificate from the network administrator ??

Corentin

 

[digpower]

I'm the network admin. But if you are refering to the one under
clientapps\sbscert, then yes. Is this the one that I need?

 

[Corentin Cras-Méneur]

I'm the network admin.

Great! that should make things easier

But if you are refering to the one under
clientapps\sbscert, then yes. Is this the one that I need?

Well, since I don't have access to theserver itself, I don't know :-(
All I know is that you need to export a public root certificate for the
Exchange server and make it available to the users. All they'll have to
do is double-click the file (under MacOS X 10.3, it's a little more
complicated under previous versions) and that *should* be it,

Corentin

 

[Corentin Cras-Méneur]

Well, since I don't have access to theserver itself, I don't know :-(
All I know is that you need to export a public root certificate for the
Exchange server and make it available to the users. All they'll have to
do is double-click the file (under MacOS X 10.3, it's a little more
complicated under previous versions) and that *should* be it,

I found some additional information for Exchange 2000 (which should
apply to lates versions as well);
http://support.microsoft.com/default.aspx?scid=kb;en-us;320291


Or more general:
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/sqlce/h
tm/_lce_configuring_ssl_encryption_705.asp

They don't talk about exporting the cert for other computers though but
somehow emphasizes that if you don't use a cert obtained through a CA
authority, but instead create your own, it must be added in the CA
databases of the client computers (which is the problem for you right
now),

On Server A, use the MMC Certificates snap-in to export the certificate.
When you export a certificate for use on another computer, always select
the following options and remember the password:

• Yes, Export the private key

• Personal Information Exchange - PKCS #12 (.PFX)

• Include all certificates in the certification path if possible
NOTE: Do not select Require Stong Encryption.

I hope it'll help,



Corentin

 

[digpower]

So I need to have a public root certificate? It cant be created from
the SBS server? How do I obtain a one? I went into the Certificate
MMC and did not see anything of use there.

 

[Corentin Cras-Méneur]

So I need to have a public root certificate? It cant be created from
the SBS server? How do I obtain a one? I went into the Certificate
MMC and did not see anything of use there.

Well you either get one from an official approved certification
authority (lets say Verisign or Thawte) for the server - in which case,
once the cert is installed on the server, you shouldn't have any problem
- or you make your server the authority, and generate one (on Windows, I
have no idea of the procedure) that you will have to distribute to all
the client computers.

Corentin