Wednesday, June 16, 2010

WildCard Certificate might not work with Outlook AnyWhere (exchange 2007/Exchang 2010)

Consider the following scenario:
You have an Exchange 2010 server for which we have a wildcard certificate. The SAN on the SSL cert is *.domain.com. That is fine However Outlook Anywhere, via autodiscovery, sets the required cert name to msstd:server.domain.com. This will appears to prevent the user from logging on via Outlook Anywhere. If you remove the requirement for a particular SSL in Outlooks proxy settings then things work fine.

to solve this issue please make sure to run the following:
Set-OutlookProvider EXPR -Server $null -CertPrincipalName none

Tricky!

5 comments:

The Kronbergs said...

Or you can follow the online documentation and do this:

Set-OutlookProvider -Identity EXPR -CertPrincipalName msstd:*.domain.com

http://technet.microsoft.com/en-us/library/cc535023%28EXCHG.80%29.aspx

Alex said...

I have heard about different interesting utilities which work with MS Outlook. But I tested one of them and I was pleased after using. It was downloaded from one forum. In my opinion the program is one of the best solutions in this condition - how to export the ost data to a pst.

Harry said...

Outlook is a marvellous tool, but I have found it often lacks compatibility across the board. It seems the same is now with a wildcard certificate. There are enough work arounds and it isn't really a problem. Just more of an incovenience.

Rachel Burr said...

All the contents you mentioned in post is too good and very useful. I will keep it in mind, thanks for sharing the information keep updating, looking forward for more posts. cheap wildcard ssl

mogali said...

Cheap Wildcard SSL - Cheap SSL certificates (including wildcard and multi-domain (SAN) SSL certificates) from Comodo, GeoTrust, Thawte and Symantec (VeriSign)