Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Certificate Error OWA

10 views
Skip to first unread message

Guido

unread,
Nov 15, 2007, 4:00:02 AM11/15/07
to
When we connect OWA from a Windows Vista PC, we get certificate error.

Exchange Server is part of Windows SBS 2003.

How do we fix this.

Your help is appreciated.

Regards,

Guido

Henrik

unread,
Nov 15, 2007, 6:02:03 AM11/15/07
to
Hi

If Im not misstaken this error occurs when you install the certificate In
the default certificate container.

If you click the error sign In the IE toolbar and edit the properties for
the certificate (rerunning the cert install wizard) you get the ability to
reinstall the cert and then choose the container to use. Choose the trusted
cert container this time.

Good luck
Henrik

"Guido" <Gu...@discussions.microsoft.com> skrev i meddelandet
news:42DF6484-1179-4029...@microsoft.com...

Guido

unread,
Nov 15, 2007, 2:56:11 PM11/15/07
to
Thanks Henrik,

I dont think anyone has installed the certificate.

What is the procedure to install it correctly.

Guido

Guido

unread,
Nov 15, 2007, 3:07:03 PM11/15/07
to
I should also mention that the way we connect to OWA is by

ip address/exchange

Guido

Robert Li [MSFT]

unread,
Nov 16, 2007, 1:59:05 AM11/16/07
to
Hi Guido,

Thanks for posting in our newsgroup.

First please let me know the following to make your situation more clearly:

Do you visit the OWA by typing https://ipaddress/exchange from Internet or
internal?

If the SBS server uses the third party certificate, you may see the
certificate error visiting RWW and OWA. This is expected behavior. To avoid
this, you can request a third party certificate to install on SBS.

To avoid the certificate error appear again, please do the following steps
to import certificate:

1. Click certificate error and click View Certificate.
2. On the General tab, click Install Certificate and click Next.
3. Click Select certificate in the following store and click Browse.
4. Click Trusted Root Certification Authorities.
5. Click OK and Next.
6. Click Finish.

If you use http://ipaddress/exchange to access OWA, please ensure you have
run the CEICW as the following steps:
1. Click Start, click Server Management. Click To Do List and then click
"Connect to the Internet". Click Next, and go through the Internet option.
2. Select Enable firewall and click Next.
3. On the Web Services Configuration page shows, make sure Outlook Web
Access is selected. Click Next.
4. On the Web Server Certificate page shows. Select "Create a new Web
server certificate", If you use http://ipaddress/exchange to access OWA,
type the public IP address in the "Web server name".

5. Go through the steps to finish the wizard.

More info:

825763 How to configure Internet access in Windows Small Business Server
2003
http://support.microsoft.com/?id=825763

Hope this helps.

If you need further assistance, please don't hesitate to let me know

Best regards,

Robert Li(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================

This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
<From: "Henrik" <hear01.hotmail.com>
<References: <42DF6484-1179-4029...@microsoft.com>
<Subject: Re: Certificate Error OWA
<Date: Thu, 15 Nov 2007 12:02:03 +0100
<Lines: 29
<X-Priority: 3
<X-MSMail-Priority: Normal
<X-Newsreader: Microsoft Outlook Express 6.00.2900.3138
<X-RFC2646: Format=Flowed; Original
<X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198
<Message-ID: <unUC2b3...@TK2MSFTNGP06.phx.gbl>
<Newsgroups: microsoft.public.windows.server.sbs
<NNTP-Posting-Host: huddinge.se 193.183.253.50
<Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP06.phx.gbl
<Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:76094
<X-Tomcat-NG: microsoft.public.windows.server.sbs

Guido

unread,
Nov 16, 2007, 3:49:02 PM11/16/07
to
Hi Robert,

I performed the first part of you answer which is installing the certificate
into the Trusted Root Certification Authorities.

This did not fix the problem.

We use http://ipaddress/exchange to access OWA.

In CEICEW, what is the exact syntax in the field where we create a new Web
server certificate.

Is it 123.123.123.123 or

http://123.123.123.123 or

https://123.123.123.123

Regards,

Guido

Robert Li [MSFT]

unread,
Nov 22, 2007, 9:42:22 PM11/22/07
to
Hi Guido,

There are two ways to install the SBS self signed certificate on Vista
machine.

Method 1:

1. In Windows Internet Explorer 7, click Continue to this website (not
recommended).

A red Address Bar and a certificate warning appear.

2. Click the Certificate Error button to open the information window.
3. Click View Certificates, and then click Install Certificate.
4. On the warning message that appears, click Yes to install the
certificate.
5. Click Select certificate in the following store and click Browse.
6. Click Trusted Root Certification Authorities.
7. Click OK and Next.
8. Click Finish.

Notes: In Windows Vista, the same issue occurs with self-signed
certificates when you use Internet Explorer 7. However, the option to
install certificates is not available unless you run Windows Internet
Explorer 7 with administrator rights. To do this, right-click the Internet
Explorer icon, and then select Run as Administrator.

More info:
Warning message when a user tries to connect to a secure Web site by using
Internet Explorer 7: "There is a problem with this website's security
certificate"
http://support.microsoft.com/?id=931850

Method 2: To install the self-signed certificate (sbscert.cer) on a
computer that is running Windows Vista and that is not joined to the network

1. From a computer that is joined to the Windows SBS domain, click Start,
click Run, and then type \\ServerName\ClientApps\SBScert\.
2. Copy and paste sbscert to a floppy disk or a USB key.
3. Log on to your computer that is not joined to the Windows SBS domain as
an administrator.
4. Insert the floppy disk or USB key into the computer that is running
Windows Vista and that is not joined to the domain, and from which you
would like to access Remote Web Workplace.
5. Launch Internet Explorer.
6. From the Tools menu, click Internet Options.
7. On the Content tab, in the Certificates section, click the Certificate
button.
8. In the Certificate page, click Import.
9. In the File to import page of the Certificate Import Wizard, browse to
the location of the saved sbscert.cer, and then follow the instructions to
complete the wizard. When asked where to place the certificate, you must
place it in the Trusted Root Certification Authorities certificate store.

Important
If you do not specify the Trusted Root Certification Authorities store when
you import the certificate, the user will still get a warning when the user
browses to Remote Web Workplace.

Note
Sending the certificate via e-mail is not recommended, because this file
type is blocked in Outlook.

More info:

Using Windows Vista and Outlook 2007 in a Windows Small Business Server
2003 Network
http://www.microsoft.com/downloads/details.aspx?FamilyID=46E95C56-1A4C-45BD-
8D69-5F41FF8F1F22&displaylang=en

Hope this helps.

If you need further assistance, please don't hesitate to let me know.

Best regards,

Robert Li(MSFT)

Get Secure! - www.microsoft.com/security

=====================================================

=====================================================

--------------------
<X-Tomcat-ID: 71702912
<References: <42DF6484-1179-4029...@microsoft.com>
<unUC2b3...@TK2MSFTNGP06.phx.gbl>
<MIME-Version: 1.0
<Content-Type: text/plain
<Content-Transfer-Encoding: 7bit
<From: v-ro...@online.microsoft.com (Robert Li [MSFT])
<Organization: Microsoft
<Date: Fri, 16 Nov 2007 06:59:05 GMT


<Subject: Re: Certificate Error OWA

<X-Tomcat-NG: microsoft.public.windows.server.sbs
<Message-ID: <Sh3wy4BK...@TK2MSFTNGHUB02.phx.gbl>
<Newsgroups: microsoft.public.windows.server.sbs
<Lines: 119
<Path: TK2MSFTNGHUB02.phx.gbl
<Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:76347
<NNTP-Posting-Host: TOMCATIMPORT1 10.201.218.122

0 new messages