Re: SSL OWA

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: CB (cblairATfargo.com)
Date: 05/12/04 

Date: Wed, 12 May 2004 09:28:44 -0500

Just a little more information. After installing the new cert I noticed it
does not say "You have a private key that correspons with this certificate".
Every other cert i have, including the expired one says this. I am guessing
this is the problem, or at least it is not helping. Any idea on how to fix
that?

"CB" <cblairATfargo.com> wrote in message
news:%23XqgJTCOEHA.3752@TK2MSFTNGP12.phx.gbl...
> I verified that the Entrust is a trusted vendor on the server. So i am not
> sure how i got myself in this situation either.
>
> "Mark Arnold [MVP]" <mark@mvps.org> wrote in message
> news:vg84a090s8q6i444d57po4tvg87dfi634c@4ax.com...
> > The event 47 is described thus:
> >
>
http://www.eventid.net/display.asp?eventid=47&eventno=3508&source=W3SVC&phase=1
> > Not sure how you'd have got into that situation with a bog standard
> > purchased cert or even one you'd created internally though.
> >
> > "CB" <cblairATfargo.com> wrote:
> >
> > >Thanks for the reply.
> > >
> > >
> > >When i apply our 3rd party Cert, nothing works. The only error i
receive
> is
> > >the URL can not be found. But in the event viewer on the Exchange
server
> i
> > >receive error message, listed below. So as far as i can tell the 3rd
> party
> > >cert is valid. I did compare it to the one that just expired, and it is
> the
> > >same expect for the expiration date. I do not want to use the Cert i
> create
> > >with our internal CA. This was just setup for testing wlan and i plan
to
> > >remove it after i get this mess figured out.
> > >
> > >Event Type: Warning
> > >Event Source: W3SVC
> > >Event Category: None
> > >Event ID: 47
> > >Date: 5/12/2004
> > >Time: 7:31:11 AM
> > >User: N/A
> > >Computer: EXCHANGE01
> > >Description:
> > >The server certificate for instance '1' does not chain up to a trusted
> root
> > >certificate.
> > >For additional information specific to this message please visit the
> > >Microsoft Online Support site located at:
> > >http://www.microsoft.com/contentredirect.asp.
> > >
> > >For more information, see Help and Support Center at
> > >http://go.microsoft.com/fwlink/events.asp.
> > >
> > >Event Type: Error
> > >Event Source: Schannel
> > >Event Category: None
> > >Event ID: 36869
> > >Date: 5/12/2004
> > >Time: 7:31:11 AM
> > >User: N/A
> > >Computer: EXCHANGE01
> > >Description:
> > >The SSL server credential's certificate does not have a private key
> > >information property attached to it. This most often occurs when a
> > >certificate is backed up incorrectly and then later restored. This
> message
> > >can also indicate a certificate enrollment failure.
> > >
> > >For more information, see Help and Support Center at
> > >http://go.microsoft.com/fwlink/events.asp.
> > >
> > >
> > >
> > >
> >
> >
> > Mark Arnold MCSA MCSE+M MVP,
> > FAQ: http://www.swinc.com/resource/exchange.htm
> > Blog: http://www.msexchange.me.uk
>
>

Relevant Pages

  • Re: Web Certificate for IIS Server on SBS Domain
    ... Before your reply, I actually ran across rapidssl myself, and have ordered and installed the free 30-day certificate on my site. ... I explained what you'd told me about putting my existing configuration at risk by installing Cert Services, and he said he didn't know that. ... Again, if you're just needing a cert to install on your web server to provide SSL connectivity for remote users, go with an external third-party provider. ... When you add Certificate Services on an internal network, lots of internal communications will start using pieces provided by the Cert Server instead of the defaults from Server 2003, and when things blow up, they can blow up gloriously. ...
    (microsoft.public.windows.server.sbs)
  • Re: Activesync between Windows Mobile 5 and SBS2003 gives error
    ... If you don't find a cert here that matches the URL for OWA, you need to re-run the CEICW wizard on the SBS box and re-create the self signed cert. ... I exported the certificate straight from the server. ... Treo 700wx running Windows Mobile 5. ...
    (microsoft.public.windows.server.sbs)
  • Re: Terminal Services over a VPN
    ... Create a certificate request and submit it to godaddy in order to obtain a public cert. ... You can use the wizard in IIS Manager for this by creating a new website that matches the above name (on your TS server), right-click and choose properties, directory security tab, server certificate button. ... After the install you can stop or delete the website created above since you don't need it for anything. ...
    (microsoft.public.windows.terminal_services)
  • Re: SBS 2003 Premium and Cert Services
    ... that philosphy got blown out of the equation when SBS included Exchange OWA ... "Small Business Server" which is MS claim as to why the risk of exposing the ... the Certificate Server on another server, ... >> Cert, or you could edit the properties of your Certification Authority to ...
    (microsoft.public.windows.server.sbs)
  • Re: Web Certificate for IIS Server on SBS Domain
    ... and installed the free 30-day certificate on my site. ... instructions to install Certificate Services. ... If I can find a way to issue my own cert without risking my SBS setup, ... > Server instead of the defaults from Server 2003, and when things blow up, ...
    (microsoft.public.windows.server.sbs)