RE: ssl certificate error on public folders

Hi Scott,

Thanks for updating.

I searched your MPS Report and IIS metadata, please try the following:

1. Open the IIS manager and expand "Web Sites" to the "Default Web Site".
2. Right click on the: Exadmin virtual directory and select "properties".
3. Click on the "Directory Security" tab and under "Secure communications"
click the "Edit" button.
4. Uncheck the boxes for "Require 128-bit encryption" and "Require secure
channel (SSL).
5. Click "OK" twice.
6. Repeat steps 2 through 5 for "Exchange", "Exchweb" and "Public" virtual
directories.
7 Right click on "Default Web Site" and select "Properties".
8. Click on the "Directory Security" tab and under "Secure communications"
click the "Server Certificate" button.
9. In the "Web Server Certificate Wizard", click "Next", click the radio
button for "Remove the current certificate" and click "Next" twice and
"Finish" to remove the certificate.
10. Restart the IIS Admin service in the services mmc.
11 Right click on "Default Web Site" and select "Properties".
12. Click on the "Directory Security" tab and under "Secure
communications" click the "Server Certificate" button.
13. In the "Web Server Certificate Wizard", click "Next", click the radio
button for "Assign an existing certificate" and click "Next".
14. Select the correct "third party " certificate in the list and click
"Next", verify the correct SSL port and click "Next" twice and click
"Finish".
15. Repeat steps 2 though 5 to enable "Require secure channel (SSL) and
"Require 128-bit encryption" for all but the Exadmin virtual directories.
16. Close the IIS Manager and restart the IIS Admin service in the services
mmc.
17. Verify all components operate as expected.

I am looking forward to hear from you.

If you need further assistance, please don't hesitate to let me know.

Best regards,

Robert Li(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================

This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
<X-Tomcat-ID: 153589939
<References: <A82AA9AA-44EC-4B84-971E-845EE4B4E30B@xxxxxxxxxxxxx>
<MIME-Version: 1.0
<Content-Type: text/plain
<Content-Transfer-Encoding: 7bit
<From: v-robeli@xxxxxxxxxxxxxxxxxxxx (Robert Li [MSFT])
<Organization: Microsoft
<Date: Wed, 25 Apr 2007 08:52:17 GMT
<Subject: RE: ssl certificate error on public folders
<X-Tomcat-NG: microsoft.public.windows.server.sbs
<Message-ID: <WMtSMcxhHHA.2164@xxxxxxxxxxxxxxxxxxxxxx>
<Newsgroups: microsoft.public.windows.server.sbs
<Lines: 142
<Path: TK2MSFTNGHUB02.phx.gbl
<Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:32511
<NNTP-Posting-Host: tomcatimport2.phx.gbl 10.201.218.182
<
<Hi Scott,
<
<Thanks for posting in our newsgroup.
<
<From your description, I know that you installed third party certificate
<for Exchange, when you try to view public folders in Exchange Manager, you
<get:
<
<The SSL certificate server name is incorrect.
<ID no: c103b404
<Exchange system manager
<
<If I am off-base, please don't hesitate to let me know.
<
<Please take the following steps to see if the problem can be resolved:
<
<1. Open IIS Manager
<2. Navigate to Web Sites\Default Web Site
<3. Right click Default Web Site and choose Properties.
<4. Click on the Directory Security tab.
<5. Under Secure Communications, click the Server Certificate button.
<6. In the IIS Certificate Wizard, choose the "Remove the current
<certificate" option and click Next.
<7. Click Next again, then click Finish.
<8. Restart the IIS admin service.
<9. Run the Configure Email and Internet Connection wizard. In the Web
<Server Certificate section, click the option to "Use a Web server
<certificate from a trusted authority" and browse to the location of the
<certificate.
<10. Complete the Configure Email and Internet Connection wizard.
<11. Check if the problem persists.
<
<If the problem persists, please kindly help me collect the following
<information for further research:
<
<1. Use the Networking MPS report to capture the server configurations:
<
<a. Download MPSrepot_network from
<http://download.microsoft.com/download/b/b/1/bb139fcb-4aac-4fe5-a579-30b0bd
9
<15706/MPSRPT_NETWORK.EXE
<b. Run MPSRPT_NETWORK.exe on the server box.
<c. The tool will automatically collect the information. This procedure
will
<take 10~15 minutes.
<d. Open Windows Explorer, navigate to the folder:
<%SystemRoot%\MPSReports\Network\Reports\Cab\
<e. Send the .cab file directly to me.
<
<2. Use the Metabase Explorer to export the IIS settings:
<a. Install .NET Framework Version 1.1:
<http://www.microsoft.com/downloads/details.aspx?FamilyID=262d25e3-f589-4842
-
<8157-034d1e7cf3a3&DisplayLang=en
<b. Install MBExplorer by installing IIS 6 Resource Kit Tools:
<http://www.microsoft.com/downloads/details.aspx?FamilyId=56FC92EE-A71A-4C73
-
<B628-ADE629C89499&displaylang=en.
<c. Once it is installed, access it from Start, Programs, IIS Resources,
<Metabase Explorer.
<d. In the left pane, right click 'LM' (under your server computer name) to
<choose 'Export to file', and then save it as IIS.mbk.
<e. Compress this mbk file and send it to me for analysis.
<
<Please send the information to v-robeli@xxxxxxxxxxxxx with subject:
<38890433-ssl certificate error on public folders.
<
<I am looking forward to hear from you.
<
<If you need further assistance, please don't hesitate to let me know.
<
<Best regards,
<
<Robert Li(MSFT)
<
<Microsoft CSS Online Newsgroup Support
<
<Get Secure! - www.microsoft.com/security
<
<=====================================================
<
<This newsgroup only focuses on SBS technical issues. If you have issues
<regarding other Microsoft products, you'd better post in the corresponding
<newsgroups so that they can be resolved in an efficient and timely manner.
<You can locate the newsgroup here:
<http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
<
<When opening a new thread via the web interface, we recommend you check
the
<"Notify me of replies" box to receive e-mail notifications when there are
<any updates in your thread. When responding to posts via your newsreader,
<please "Reply to Group" so that others may learn and benefit from your
<issue.
<
<Microsoft engineers can only focus on one issue per thread. Although we
<provide other information for your reference, we recommend you post
<different incidents in different threads to keep the thread clean. In
doing
<so, it will ensure your issues are resolved in a timely manner.
<
<For urgent issues, you may want to contact Microsoft CSS directly. Please
<check http://support.microsoft.com for regional support phone numbers.
<
<Any input or comments in this thread are highly appreciated.
<
<=====================================================
<
<This posting is provided "AS IS" with no warranties, and confers no rights.
<
<--------------------
<<Thread-Topic: ssl certificate error on public folders
<<thread-index: AceGTmNk3yeciVtOSa2Mh1HmtniMCA==
<<X-WBNR-Posting-Host: 207.46.193.207
<<From: =?Utf-8?B?U2NvdHQ=?= <Scott@xxxxxxxxxxxxxxxxxxxxxxxxx>
<<Subject: ssl certificate error on public folders
<<Date: Tue, 24 Apr 2007 01:56:03 -0700
<<Lines: 13
<<Message-ID: <A82AA9AA-44EC-4B84-971E-845EE4B4E30B@xxxxxxxxxxxxx>
<<MIME-Version: 1.0
<<Content-Type: text/plain;
<< charset="Utf-8"
<<Content-Transfer-Encoding: 7bit
<<X-Newsreader: Microsoft CDO for Windows 2000
<<Content-Class: urn:content-classes:message
<<Importance: normal
<<Priority: normal
<<X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2757
<<Newsgroups: microsoft.public.windows.server.sbs
<<Path: TK2MSFTNGHUB02.phx.gbl
<<Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:32259
<<NNTP-Posting-Host: tk2msftsbfm01.phx.gbl 10.40.244.148
<<X-Tomcat-NG: microsoft.public.windows.server.sbs
<<
<<I manage an SBS2003 standard site with Exchange 2003 sp2 installed.
<<I recently installed a third party certificate for Exchange & now receive
<<the following error when trying to view public folders in Exchange
Manager.
<<
<<The SSL certificate server name is incorrect.
<<ID no: c103b404
<<Exchange system manager
<<
<<I have tried removing the option "Require secure channel" under "Secure
<<Communications" in the properties of Exadmin in IIS as detailed in
<KB324345.
<<Any other suggestions please.
<<
<<Scott
<<
<
<

.