Re: Root Certificate



On 19/1/06 11:40, in article BFF57F8F.69F2%kledgister@xxxxxxxxxxxx, "Kevin
Ledgister" <kledgister@xxxxxxxxxxxx> wrote:

> I've tried the Mac Help Desk instructions but I still get the same root
> certificate is not installed issue and Entourage won't connect to Exchange.
>
> Our IT admin created a *.crt certificate from the Exchange server but it has
> a host name mismatch.
>
> Would a host name mismatch in the certificate terminally affect Entourage to
> connect to Exchange 2003?

Using SSL *requires* that the name the client uses to contact the server
exactly matches the name in the server's certificate.

If your "IT admin" has screwed up this basic stuff, just tell Entourage to
contact the broken name, and then hardwire this broken name in your
/etc/hosts file.

In more detail:

Say you are currently talking to "exchange.example.com" and your "IT admin"
has used the name "broken-name.microsoft.com" in the certificate.

1) Use the Lookup tab in Network Utility.app to find the IP address for
exchange.example.com. Say it returns 1.2.3.4...

2) In Terminal.app, type:

sudo -s
echo "1.2.3.4 broken-name.microsoft.com" >> /etc/hosts
exit

3) Restart Entourage.

Cheers,

Chris

.



Relevant Pages

  • Re: 2008; Certificate problems
    ... Have never setup a certificate, using Intermedia.net as an Exchange 2007 provider, no problem with Entourage 2004, or 2008. ... The Exchange server SSL certificates ...
    (microsoft.public.mac.office.entourage)
  • Re: Entourage 2004 and Exchange 2003: Getting rid of that Root Certificate Warning
    ... The certificate is titled SERVER.COM. ... .COM, but when I change the Exchange Server name, Entourage will re-download ...
    (microsoft.public.mac.office.entourage)
  • Re: can I ignore root certificate error?
    ... > Entourage and Exchange. ... > root certificate installed when I launch Entourage 2004? ... Clicking on it will install the details into your keychain. ...
    (microsoft.public.mac.office.entourage)
  • Root Certificate
    ... Our IT admin created a *.crt certificate from the Exchange server but it has ... Would a host name mismatch in the certificate terminally affect Entourage to ...
    (microsoft.public.mac.office.entourage)
  • Re: Entourage 2004 wont collect TLS secure mail from Demon Internet (UK)
    ... > Demon Internet in the UK started offering TLS secure mail collection ... > Entourage X on Mac, but when I upgraded to Entourage 2004, I get the ... > Microsoft supplies instructions for installing root certificates and I ... > However I don't have the certificate to install for Demon Internet. ...
    (microsoft.public.mac.office.entourage)

Loading