Autodiscover on Android Unchecks SSL?
Testing autodiscover to Exchange 2007 over mobile data network on Android Galaxy S6 and everything is nearly working, except that when it goes through the autodiscover process, it unchecks the "Use SLL" checkbox and then fails (as we require SSL); if one manually rechecks and continues on all is well and the account syncs up. Any thoughts on why this is happening?
This topic first appeared in the Spiceworks Community
The answer was found elsewhere: Android is much more picky when it comes to SSL certificates and what works in the browser doesn't necessarily work in an Android app.
A technician had to add a "SSLCACertificateFile to the SSL conf to provide this intermediate chain". I don't know what this is, but it worked.
Similar Messages
-
icloud Email does not work. When running Connection doctor it indicates I must check or uncheck SSL. This has not fixed the problem
iCloud email addresses (@mac.com, @me.com and @icloud.com) require SSL. Is your address an iCloud address or someone else?
-
Yosemite mail not let me uncheck ssl on port 110 outgoing
Updated to Yosemite now mail won't send. Not let me uncheck SSL port 110
OS X Mail: Troubleshooting sending and receiving email messages - Apple Support
-
Can't access ABS URL and autodiscover.sipdomain URLs externally - SSL protocol error
Problems:
- Can't sync Address Book for external or internal clients (I can do searches however just fine so I'm not sure what protocol is used to perform those, if not with address book)
- Can't connect to Lync mobile.
What I discovered was common with these issues is when I go to try and manually enter in the browser either:
https://lyncdiscover.sipdomain.com/ (to test mobile autodiscover connectivity)
or
https://"extwebservicesURL"/abs (to test address book)
I get same response from google: Error 107 (net::ERR_SSL_PROTOCOL_ERROR): SSL protocol error.
I also ran Test-CsMcxP2PIM and got this:
TargetUri : https://pitlyncpool01.pit.local:443/CertProv/CertProvisioningService.svc
TargetFqdn : pitlyncpool01.pit.local
Result : Failure
Latency : 00:00:00
Error : ERROR - No response received for Web-Ticket service.
Inner Exception:The content type text/html; charset=utf-8 of the response message does not match the content type of the binding (text/xml; charset=utf-8). If using a custom encoder, be
sure that the IsContentTypeSupported method is implemented properly. The first 1024 bytes of the response were: '<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.o
rg/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title>IIS 7.5 Detailed Error - 500.0 - Internal Server Error</title>
<style type="text/css">
And similar result when I test with "Test-CsAddressBookService"
TargetUri : https://pitlyncpool01.pit.local:443/groupexpansion/service.svc
TargetFqdn : pitlyncpool01.pit.local
Result : Failure
Latency : 00:00:00
Error : ERROR - No response received for Web-Ticket service.
Inner Exception:The content type text/html; charset=utf-8 of the response message does not match the content type of the binding (text/xml; charset=utf-8). If using a custom encoder, be
sure that the IsContentTypeSupported method is implemented properly. The first 1024 bytes of the response were: '<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.o
rg/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title>IIS 7.5 Detailed Error - 500.0 - Internal Server Error</title>
The only search on google that I found on this is to uninstall IIS and Lync web components and reinstall. Which I tried, but Lync web components wouldn't install back (error), so I restored server back from the snapshot and back to square one..
Also tried https://www.testocsconnectivity.com to run test on mobile autodiscovery and got this:
ExRCA is attempting to obtain the SSL certificate from remote server lyncdiscover.sipdomain.com on port 443.
ExRCA wasn't able to obtain the remote SSL certificate.
Additional Details
The certificate couldn't be validated because SSL negotiation wasn't successful. This could have occurred as a result of a network error or because of a problem with the certificate installation.
Is there anything else I can look into to find out why am I getting these errors? Maybe to try OCS logging utility? But I don't know which components to checkmark for logging..
Thank you for any help and Happy New Year!
SergeyHi,
It seems the web service url is not valid or the web service not function. Is it Lync Standard Edition or Enterprise? Did the mobility issue also happen for external? Have you assigned a public certificate for reverse proxy correctly?
1. Please go to topology builder and check which FQDN you did put in for internal and external web service. For Lync Server Standard Edition, the internal web base URL should be same with your front end server FQDN.
If the internal domain name is different with external domain name, for example, your internal domain is contoso.net, but your external domain name is contoso.com. The external base URL should use the contoso.com domain name.
2. Please make sure the certificate has been assigned on front end server successfully. Please go to Lync Server deployment wizard to check it.
3. In IIS, please make sure Lync Server Internal Web Site is configured on ports 80 and 443 and Lync Server External Web is configured on ports 8080 and 4443.
More details about configuring reverse proxy for your reference:
http://social.technet.microsoft.com/wiki/contents/articles/9807.configuring-forefront-tmg-2010-as-reverse-proxy-for-lync-server-2010.aspx
If the issue persists, please try to enable logging tool and reproduce the issue to get report for further troubleshooting.
http://blog.schertz.name/2011/06/using-the-lync-logging-tool/
Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information
found there. Please make sure that you completely understand the risk before retrieving any suggestions from the above link.
Kent Huang
TechNet Community Support -
How to uncheck SSL in Mail 7.3
On my MacBook Air which is up to date I find that Mail will not send messages. I have narrowed it down to Mail/Preferences/Accounts/Account Information/Outgoing Mail Server (SMPT)/Edit SMPT Server List/Advanced/Use Secure Sockets Layer (SSL). Somehow it must have got itself checked, and I don’t seem to be able to find a way to uncheck it.
This seems to make the difference between being able to send messages, and not being able to, because I checked the box on my other Mac, and now the other Mac which was sending messages fine a moment ago, has also stopped sending messages.
Any ideas?Navigate to that same section and you should see:
Are you saying that you cannot uncheck the SSL box and change your Authentication method? Also, there is another SSL checkbox in Accounts > Advanced. Unchecking it should change the port used. Be sure to check with your mail provider what the proper setup should be. Most providers use SSL and some sort of authentication. -
Exchange 2013 autodiscover finds external & internal SSL certificate causing autodiscover to fail
<p>Hi:</p><p>I'm currently working on a windows 2012 server, with exchange 2013, lets say our internal domain is "cars.com" and ALSO the case for our external domain. We have purchased an SSL wildcard positive certificate
*.cars.com so that we could configure Outlook Anywhere, we have created the needed DNS records at godaddy and our internal server, OWA, ECP it all works if you go to <a href="https://bird.cars.com/owa">https://bird.cars.com/owa</a>
because we have a DNS record for bird in godaddy and out local server, so all of that is working like a pro ! here comes the tricky part, our website is registered in godaddy but hosted by someone else a company called poetic systems; when we test the connection
with the remote connectivity analyzer website we get a very peculiar error that says SSL certificate not valid, now it provides the name of the certificate it found and is not ours, we found that the hosting company is listening in port 443, therefore, it
is pulling their self signed certificate also, does anyone have a fix for this, I have done this same setup before for other companies and this is the first time a situation like this happens. I REALLY NEED HELP !!!!!</p>Hi,
According to your description, there is a certificate error when you test Outlook Anywhere connection by ExRCA.
If I misunderstand your meaning, please feel free to let me know.
And to understand more about the issue, I’d like to confirm the following information:
What’s detail error page?
Check the Outlook Anywhere configuration: get-outlookanywhere |fl
Check the certificate : get-exchangecertificate |fl
If you have any question, please feel free to let me know.
Thanks,
Angela Shi
TechNet Community Support -
Hi all,
we have a GMS 2.0.1 configured with wildcard certificate of GEOTrust. Configured autodiscover dns in public and local. iOS work perfectly but Android not.
Anybody be able to use GMS autodiscover on android?
Thanksmauro,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://www.novell.com/support and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Forums Team
http://forums.novell.com -
Autodiscover is ok with selfssl but problem in outlook exchange 2013
hi,
Finally i can setup autodiscover service with self ssl, here is the result
Submit
Connectivity Test Successful
Test Details
The Microsoft Connectivity Analyzer is attempting to test Autodiscover for [email protected].
Autodiscover was tested successfully.
Additional Details
Elapsed Time: 18255 ms.
Test Steps
Attempting each method of contacting the Autodiscover service.
The Autodiscover service was tested successfully.
Additional Details
Elapsed Time: 18255 ms.
Test Steps
Attempting to test potential Autodiscover URL https://mail.tulisoft.co.in/AutoDiscover/AutoDiscover.xml
Testing of the Autodiscover URL was successful.
Additional Details
Elapsed Time: 18252 ms.
Test Steps
Attempting to resolve the host name mail.tulisoft.co.in in DNS.
The host name resolved successfully.
Additional Details
IP addresses returned: 138.91.34.29
Elapsed Time: 146 ms.
Testing TCP port 443 on host mail.tulisoft.co.in to ensure it's listening and open.
The port was opened successfully.
Additional Details
Elapsed Time: 260 ms.
Testing the SSL certificate to make sure it's valid.
The certificate passed all validation requirements.
Additional Details
Elapsed Time: 661 ms.
Test Steps
The Microsoft Connectivity Analyzer is attempting to obtain the SSL certificate from remote server mail.tulisoft.co.in on port 443.
The Microsoft Connectivity Analyzer successfully obtained the remote SSL certificate.
Additional Details
Remote Certificate Subject: CN=mail.mail.tulisoft.co.in, Issuer: CN=mail.mail.tulisoft.co.in.
Elapsed Time: 638 ms.
Validating the certificate name.
The certificate name was validated successfully.
Additional Details
Host name mail.tulisoft.co.in was found in the Certificate Subject Alternative Name entry.
Elapsed Time: 0 ms.
Testing the certificate date to confirm the certificate is valid.
Date validation passed. The certificate hasn't expired.
Additional Details
The certificate is valid. NotBefore = 5/5/2014 7:18:25 AM, NotAfter = 5/5/2019 7:18:25 AM
Elapsed Time: 0 ms.
Checking the IIS configuration for client certificate authentication.
Client certificate authentication wasn't detected.
Additional Details
Accept/Require Client Certificates isn't configured.
Elapsed Time: 953 ms.
Attempting to send an Autodiscover POST request to potential Autodiscover URLs.
The Microsoft Connectivity Analyzer successfully retrieved Autodiscover settings by sending an Autodiscover POST.
Additional Details
Elapsed Time: 16229 ms.
Test Steps
The Microsoft Connectivity Analyzer is attempting to retrieve an XML Autodiscover response from URL https://mail.tulisoft.co.in/AutoDiscover/AutoDiscover.xml for user [email protected].
The Autodiscover XML response was successfully retrieved.
Additional Details
Autodiscover Account Settings
XML response:
<?xml version="1.0"?>
<Autodiscover xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://schemas.microsoft.com/exchange/autodiscover/responseschema/2006">
<Response xmlns="http://schemas.microsoft.com/exchange/autodiscover/outlook/responseschema/2006a">
<User>
<DisplayName>mailadmin</DisplayName>
<LegacyDN>/o=Tulisoft/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=594a81cd32dc4d488dbf698230a8a5bf-mailadmin</LegacyDN>
<DeploymentId>e2467991-8c60-4245-91b9-1518067363a0</DeploymentId>
</User>
<Account>
<AccountType>email</AccountType>
<Action>settings</Action>
<Protocol>
<Type>EXCH</Type>
<Server>[email protected]</Server>
<ServerDN>/o=Tulisoft/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/[email protected]</ServerDN>
<ServerVersion>73C08204</ServerVersion>
<MdbDN>/o=Tulisoft/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/[email protected]/cn=Microsoft Private MDB</MdbDN>
<ASUrl>https://mail.mail.tulisoft.co.in/EWS/Exchange.asmx</ASUrl>
<OOFUrl>https://mail.mail.tulisoft.co.in/EWS/Exchange.asmx</OOFUrl>
<OABUrl>https://mail.mail.tulisoft.co.in/OAB/22012d7f-80de-41bb-b2bf-4a52355ffdec/</OABUrl>
<UMUrl>https://mail.mail.tulisoft.co.in/EWS/UM2007Legacy.asmx</UMUrl>
<Port>0</Port>
<DirectoryPort>0</DirectoryPort>
<ReferralPort>0</ReferralPort>
<PublicFolderServer>mail.mail.tulisoft.co.in</PublicFolderServer>
<AD>mail.mail.tulisoft.co.in</AD>
<EwsUrl>https://mail.mail.tulisoft.co.in/EWS/Exchange.asmx</EwsUrl>
<EmwsUrl>https://mail.mail.tulisoft.co.in/EWS/Exchange.asmx</EmwsUrl>
<EcpUrl>https://mail.mail.tulisoft.co.in/ecp/</EcpUrl>
<EcpUrl-um>?rfr=olk&p=customize/voicemail.aspx&exsvurl=1&realm=mail.tulisoft.co.in</EcpUrl-um>
<EcpUrl-aggr>?rfr=olk&p=personalsettings/EmailSubscriptions.slab&exsvurl=1&realm=mail.tulisoft.co.in</EcpUrl-aggr>
<EcpUrl-mt>PersonalSettings/DeliveryReport.aspx?rfr=olk&exsvurl=1&IsOWA=<IsOWA>&MsgID=<MsgID>&Mbx=<Mbx>&realm=mail.tulisoft.co.in</EcpUrl-mt>
<EcpUrl-ret>?rfr=olk&p=organize/retentionpolicytags.slab&exsvurl=1&realm=mail.tulisoft.co.in</EcpUrl-ret>
<EcpUrl-sms>?rfr=olk&p=sms/textmessaging.slab&exsvurl=1&realm=mail.tulisoft.co.in</EcpUrl-sms>
<EcpUrl-publish>customize/calendarpublishing.slab?rfr=olk&exsvurl=1&FldID=<FldID>&realm=mail.tulisoft.co.in</EcpUrl-publish>
<EcpUrl-photo>PersonalSettings/EditAccount.aspx?rfr=olk&chgPhoto=1&exsvurl=1&realm=mail.tulisoft.co.in</EcpUrl-photo>
<EcpUrl-tm>?rfr=olk&ftr=TeamMailbox&exsvurl=1&realm=mail.tulisoft.co.in</EcpUrl-tm>
<EcpUrl-tmCreating>?rfr=olk&ftr=TeamMailboxCreating&SPUrl=<SPUrl>&Title=<Title>&SPTMAppUrl=<SPTMAppUrl>&exsvurl=1&realm=mail.tulisoft.co.in</EcpUrl-tmCreating>
<EcpUrl-tmEditing>?rfr=olk&ftr=TeamMailboxEditing&Id=<Id>&exsvurl=1&realm=mail.tulisoft.co.in</EcpUrl-tmEditing>
<EcpUrl-extinstall>Extension/InstalledExtensions.slab?rfr=olk&exsvurl=1&realm=mail.tulisoft.co.in</EcpUrl-extinstall>
<ServerExclusiveConnect>off</ServerExclusiveConnect>
</Protocol>
<Protocol>
<Type>EXPR</Type>
<Server>mail.mail.tulisoft.co.in</Server>
<ASUrl>https://mail.tulisoft.co.in/ews/exchange.asmx</ASUrl>
<OOFUrl>https://mail.tulisoft.co.in/ews/exchange.asmx</OOFUrl>
<OABUrl>https://mail.tulisoft.co.in/OAB/22012d7f-80de-41bb-b2bf-4a52355ffdec/</OABUrl>
<UMUrl>https://mail.tulisoft.co.in/ews/UM2007Legacy.asmx</UMUrl>
<Port>0</Port>
<DirectoryPort>0</DirectoryPort>
<ReferralPort>0</ReferralPort>
<SSL>On</SSL>
<AuthPackage>Ntlm</AuthPackage>
<EwsUrl>https://mail.tulisoft.co.in/ews/exchange.asmx</EwsUrl>
<EmwsUrl>https://mail.tulisoft.co.in/ews/exchange.asmx</EmwsUrl>
<EcpUrl>https://mail.tulisoft.co.in/ecp/</EcpUrl>
<EcpUrl-um>?rfr=olk&p=customize/voicemail.aspx&exsvurl=1&realm=mail.tulisoft.co.in</EcpUrl-um>
<EcpUrl-aggr>?rfr=olk&p=personalsettings/EmailSubscriptions.slab&exsvurl=1&realm=mail.tulisoft.co.in</EcpUrl-aggr>
<EcpUrl-mt>PersonalSettings/DeliveryReport.aspx?rfr=olk&exsvurl=1&IsOWA=<IsOWA>&MsgID=<MsgID>&Mbx=<Mbx>&realm=mail.tulisoft.co.in</EcpUrl-mt>
<EcpUrl-ret>?rfr=olk&p=organize/retentionpolicytags.slab&exsvurl=1&realm=mail.tulisoft.co.in</EcpUrl-ret>
<EcpUrl-sms>?rfr=olk&p=sms/textmessaging.slab&exsvurl=1&realm=mail.tulisoft.co.in</EcpUrl-sms>
<EcpUrl-publish>customize/calendarpublishing.slab?rfr=olk&exsvurl=1&FldID=<FldID>&realm=mail.tulisoft.co.in</EcpUrl-publish>
<EcpUrl-photo>PersonalSettings/EditAccount.aspx?rfr=olk&chgPhoto=1&exsvurl=1&realm=mail.tulisoft.co.in</EcpUrl-photo>
<EcpUrl-tm>?rfr=olk&ftr=TeamMailbox&exsvurl=1&realm=mail.tulisoft.co.in</EcpUrl-tm>
<EcpUrl-tmCreating>?rfr=olk&ftr=TeamMailboxCreating&SPUrl=<SPUrl>&Title=<Title>&SPTMAppUrl=<SPTMAppUrl>&exsvurl=1&realm=mail.tulisoft.co.in</EcpUrl-tmCreating>
<EcpUrl-tmEditing>?rfr=olk&ftr=TeamMailboxEditing&Id=<Id>&exsvurl=1&realm=mail.tulisoft.co.in</EcpUrl-tmEditing>
<EcpUrl-extinstall>Extension/InstalledExtensions.slab?rfr=olk&exsvurl=1&realm=mail.tulisoft.co.in</EcpUrl-extinstall>
<ServerExclusiveConnect>on</ServerExclusiveConnect>
<EwsPartnerUrl>https://mail.tulisoft.co.in/ews/exchange.asmx</EwsPartnerUrl>
</Protocol>
<Protocol>
<Type>WEB</Type>
<Port>0</Port>
<DirectoryPort>0</DirectoryPort>
<ReferralPort>0</ReferralPort>
<Internal>
<OWAUrl AuthenticationMethod="Basic, Fba">https://mail.mail.tulisoft.co.in/owa/</OWAUrl>
<Protocol>
<Type>EXCH</Type>
<ASUrl>https://mail.mail.tulisoft.co.in/EWS/Exchange.asmx</ASUrl>
</Protocol>
</Internal>
<External>
<OWAUrl AuthenticationMethod="Fba">https://mail.tulisoft.co.in/owa/</OWAUrl>
<Protocol>
<Type>EXPR</Type>
<ASUrl>https://mail.tulisoft.co.in/ews/exchange.asmx</ASUrl>
</Protocol>
</External>
</Protocol>
<Protocol>
<Type>EXHTTP</Type>
<Server>mail.mail.tulisoft.co.in</Server>
<ASUrl>https://mail.mail.tulisoft.co.in/EWS/Exchange.asmx</ASUrl>
<OOFUrl>https://mail.mail.tulisoft.co.in/EWS/Exchange.asmx</OOFUrl>
<OABUrl>https://mail.mail.tulisoft.co.in/OAB/22012d7f-80de-41bb-b2bf-4a52355ffdec/</OABUrl>
<UMUrl>https://mail.mail.tulisoft.co.in/EWS/UM2007Legacy.asmx</UMUrl>
<Port>0</Port>
<DirectoryPort>0</DirectoryPort>
<ReferralPort>0</ReferralPort>
<SSL>On</SSL>
<AuthPackage>Ntlm</AuthPackage>
<EwsUrl>https://mail.mail.tulisoft.co.in/EWS/Exchange.asmx</EwsUrl>
<EmwsUrl>https://mail.mail.tulisoft.co.in/EWS/Exchange.asmx</EmwsUrl>
<EcpUrl>https://mail.mail.tulisoft.co.in/ecp/</EcpUrl>
<EcpUrl-um>?rfr=olk&p=customize/voicemail.aspx&exsvurl=1&realm=mail.tulisoft.co.in</EcpUrl-um>
<EcpUrl-aggr>?rfr=olk&p=personalsettings/EmailSubscriptions.slab&exsvurl=1&realm=mail.tulisoft.co.in</EcpUrl-aggr>
<EcpUrl-mt>PersonalSettings/DeliveryReport.aspx?rfr=olk&exsvurl=1&IsOWA=<IsOWA>&MsgID=<MsgID>&Mbx=<Mbx>&realm=mail.tulisoft.co.in</EcpUrl-mt>
<EcpUrl-ret>?rfr=olk&p=organize/retentionpolicytags.slab&exsvurl=1&realm=mail.tulisoft.co.in</EcpUrl-ret>
<EcpUrl-sms>?rfr=olk&p=sms/textmessaging.slab&exsvurl=1&realm=mail.tulisoft.co.in</EcpUrl-sms>
<EcpUrl-publish>customize/calendarpublishing.slab?rfr=olk&exsvurl=1&FldID=<FldID>&realm=mail.tulisoft.co.in</EcpUrl-publish>
<EcpUrl-photo>PersonalSettings/EditAccount.aspx?rfr=olk&chgPhoto=1&exsvurl=1&realm=mail.tulisoft.co.in</EcpUrl-photo>
<EcpUrl-tm>?rfr=olk&ftr=TeamMailbox&exsvurl=1&realm=mail.tulisoft.co.in</EcpUrl-tm>
<EcpUrl-tmCreating>?rfr=olk&ftr=TeamMailboxCreating&SPUrl=<SPUrl>&Title=<Title>&SPTMAppUrl=<SPTMAppUrl>&exsvurl=1&realm=mail.tulisoft.co.in</EcpUrl-tmCreating>
<EcpUrl-tmEditing>?rfr=olk&ftr=TeamMailboxEditing&Id=<Id>&exsvurl=1&realm=mail.tulisoft.co.in</EcpUrl-tmEditing>
<EcpUrl-extinstall>Extension/InstalledExtensions.slab?rfr=olk&exsvurl=1&realm=mail.tulisoft.co.in</EcpUrl-extinstall>
<ServerExclusiveConnect>On</ServerExclusiveConnect>
</Protocol>
</Account>
</Response>
</Autodiscover>
HTTP Response Headers:
request-id: cdaeb3ce-1849-4e7e-8b84-16f43f2507a0
X-TargetBEServer: mail.mail.tulisoft.co.in
X-DiagInfo: MAIL
Persistent-Auth: true
X-FEServer: MAIL
Content-Length: 9094
Cache-Control: private
Content-Type: text/xml; charset=utf-8
Date: Tue, 06 May 2014 15:21:59 GMT
Set-Cookie: X-BackEndCookie=S-1-5-21-1925192757-1526100558-3211384720-500=u56Lnp2ejJqBzM3Ix8qanJzSmZqbx9LLnpnI0sbKmc3Syc7Oys+azsbJyJ7KgYHK0MnQzc/Oy9/MxczOxcrG36+y; expires=Tue, 06-May-2014 15:31:59 GMT; path=/AutoDiscover; secure; HttpOnly
Server: Microsoft-IIS/8.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Elapsed Time: 16229 ms.
© 2013 Microsoft | Version 3.2 | Feedback | Privacy | Terms of Use
now when going to setup outlook 2013 its saying
"An Encrypted connection to your mail server not available "
and its not configuring anyway please help..Hi,
Firstly, I’d like to explain, in Exchange 2013, all Outlook use Outlook Anywhere connect to Exchange server. Autodiscover service just help to get all information that Outlook client needs.
Thus, for the failure of configuring account, I recommend you the following troubleshooting:
1. Try to manually configure the account: please note the server name option should be filled with the user mailbox GUID:
[email protected]
To confirm it, you can run : get-mailbox name |fl exchangeGUID
2. Check if all users cannot be added in all Outlook clients.
3. Check the Outlook Anywhere configuration and certificate:
Get-outlookanywhere |fl
Get-exchangecertificate |fl
If you have any question, please feel free to let me know.
Thanks,
Angela Shi
TechNet Community Support -
Dreaded "must be configured to use a valid SSL cert" - 2008 R2
Hello everybody,
I've been browsing through hundreds of topics on the dreaded "The RD Gateway server must be configured to use
a valid SSL certificate" error using BPA (Windows Server 2008 R2 Std), but still haven't found a proper solution.
Here's the issue: RDGW not operating properly and sometime accepting connections, sometimes not.
I have an external domain example.com and internally, the domain is example.local. I have one server serving Exchange and RD, this is the server responding to mail.example.com and I have an StartSSL issued cert for mail.example.com, which is properly configured
on the server (OWA is working properly with autodiscover etc.). SSL bindings seem alright, default site is using the mail.example.com SSL cert.
If I open the RDGW Manager and go to the SSL Certificate tab, the system looks happy by having the cert installed, everything looks fine. Sometimes I even manage to connect - connection is successful, I can normally connect to any of the servers or computers.
On a second attempt, I just get the message, that the logon attempt had failed. If I run BPA on the server, I get the error of not having a proper SSL cert. If I select a self-signed cert, then also the BPA goes through, but then I have problems with connections
since everybody would need this cert to have installed.
From what I read, my problems are related to the issue that the FQDN of my server is servername.example.local and the cert is issued to mail.example.com. How can I make the thing only to talk via the mail.example.com cert? I don't think I can get a cert
that'd also contain a SAN of servername.example.local from the CA.
What can I do?Hi Andrej,
Thanks for posting in Windows Server Forum.
Here providing you the article for BPA’s configuration logs, where you can check. It also states that certificate are main problem related to this error. Please check certificate which you have bound have FQDN name of gateway server, the certificate is SSL
certificate and it’s a trusted certificate. Also check that certificate which you have importing to RD gateway must be in local computer/personal store. For more information refer below article.
1. Using the Remote Desktop Services BPA to analyze a Remote Desktop Gateway
implementation
2. RDS: The RD Gateway server must be configured to use a valid SSL certificate
In addition, you need to specify the FQDN name of RD gateway under
DefaultTSgateway in IIS setting. Please go through below article for details.
RD Gateway/Web Access Outside the Firewall
Hope it helps!
Thanks,
Dharmesh -
Rolling out SSL cert on CAS array
Hi there,
I have an exchange 2010 CAS array with 2 servers in it. I need to roll out an updated SSL certificate as the old one has expired
however, it only seems to allow me to install this certificate on the CAS1 server.
When I did was I (using the GUI) created a new Exchange certificate. Put in the FQDN of both my CAS servers when I created
it (although only 4 SAN names appear on the cert on Godaddys website, that being imap, pop, mail and autodiscover). Got my SSL cert from the 3rd party. Completed the certificate and it seems to be ok one my CAS1 server. But then there is no SSL cert on the
CAS2 server. I just wondered how I would go about installing it on that server, or even if it is necessary to have it on there.
I tried exporting/importing it from CAS1 to CAS2 but on CAS2 it just shows it as "The certificate is invalid for Exchange
Server usage".
Any help is appreciatedFirst of all, you don't need the server names in the cert if your Exchange urls are configured to a load balanced url. Going forward, you will not be able to get a certificate from 3rd party with internal urls (server fqdn) in it.
When you export the certificate from CAS1, make sure that you include the private key as well (there will be a check box to tick) and import it back on CAS2.
If not, you can just import the certificate into CAS2 by selecting Import Exchange certificate in EMC and select the 3rd party cert (just like you imported on CAS1).
Yes, you need the certificate on both servers, otherwise you will get certificate errors on clients (assuming that there is some form of load balancing in place - NLB or hardware). -
OD SSL (Client Binding Issues)
Hi,
I am having issues binding my client machines to my server. My OD has a SSL which is a standard UCC SSL, when I connect my clients it asks me if I want to trust the server I say yes then it finishes binding. I then look and see a red dot next to the OD name i just binded to, if I click on it it says server not responding. If I uncheck SSL in the ldap tab everything is perfect, but I would really like it if I could use SSL on my OD for extra protection. Anyone have any suggestions.Hmmm...still running into the same issue...do I need to give the cert reference text file certain permissions in order to work?
I have followed the advice on afp548, and have a self-rolled CA with a self-assigned cert for the server, which is also the dns name of the server. I copied the CA hash and pointed to that instead of the self-signed cert hash, but still...no dice.
-j -
Apple Mail 3.2, Leopard Defaults to SSL on Outgoing SMTP
I have just confirmed that when you go through the initial setup of a POP account in Apple Mail in Leopard it defaults to SSL turned ON in the SMTP (Outgoing) settings. In my case where my ISP doesn't use SSL for outgoing, this results in failure of Mail's test connection. Then you need to go into Mail -> Preferences -> Accounts -> Account Information -> Edit Server List (SMTP) and uncheck SSL and then put in the proper SMTP port number (usually 25).
Is there away to change this default behavior in Leopard Mail?
Thanks,
EricSame problem. The following information is from Symantec:
To disable SSL\TLS
Open Apple Mail.
Click the Mail menu and select Preferences.
Select your mail account on the left under Accounts, then click the Advanced tab.
Confirm the check box labeled "use SSL" is not checked next to ports. If necessary remove the checkmark.
Click the Account Information tab and select Edit Server list from the drop down next to Outgoing Mail Server.
Click the Advanced tab and confirm there is not a checkmark next to Use Secure Socket Layer(SSL).
Click OK and close the accounts. Window and choose to save.
Click Save to update your settings.
Restart Apple Mail.
This does work for a while but eventually Mail reverts to enabling Use SSL and disabling Allow Insecure Authentication but only one some of my addresses but not all. Some accounts POP logs-in but not SMTP. -
Hi,
I am using Outlook2013/Exchange Mail app in mobile devices to connect to Office365 in cloud. In doing this, I'm using my own relay server in between Outlook 2013 and Office365. The relay server accepts HTTP requests.
Mobile clients are working fine and I'm able to connect to O365 successfully. However, Outlook2013 is unable to connect.
Outlook2013 configuration:
a. Manual setup
b. Selected Outlook.com or EAS compatible service
c. Entered User credentials
d. Mail server: Relay server IP:port
e. Clicked Next
Can someone put their thoughts on this issue? I assume Outlook is sending HTTPS and not HTTP packets.Is there a way to uncheck SSL during EAS configuration?
Also, if relay server details are given does Outlook still tries Autodiscover?
I also need details how initial connection from Outlook is made.
ThanksGenerally, we configure Exchange account in Outlook by using autodiscover service to finish Auto Account Setup.
Set up your Office 365 or other Exchange-based email in Outlook 2010 or Outlook 2013
http://office.microsoft.com/en-001/office-online-help/set-up-your-office-365-or-other-exchange-based-email-in-outlook-2010-or-outlook-2013-HA102823161.aspx
Microsoft doesn't support manually setting up a profile in Outlook for connectivity to mailboxes in Exchange Online in Office 365.
Outlook can't set up a new profile by using Exchange Autodiscover for an Exchange Online mailbox in Office 365
http://support.microsoft.com/kb/2404385/en-us -
I just upgraded to 10.10. On the mail program, one of my accounts is having an issue sending email. I am getting the following error message:
The certificate for this server is invalid.
Select a different outgoing mail server from the list below or click Try Later to leave the message in your Outbox until it can be sent.
But on another machine running Mavericks, I can still continue to send email. The same is try from my iPhone 5S.
On that machine running Mavericks the SMTP is configured as SSL and for "Usual Ports" (25, 465, 587) but THIS OPTION IS MISSING ON THE NEW VERSION. On the new version I have tried configuring the port to 25 and then 465 and 587 with no success. I have used the Network Utility to see if my provider is blocking me -- it is not. I have no third-party software on this machine (anti virus). I can receive email fine. On the new Yosemitie Mail there are new checkbox options of Automatically check my settings and Allow unsecure connections. I tried to uncheck SSL for SMTP but then it says it cannot send securely my passowrd and i need to check the option "Allow to send unsecurely". I did that but the same error message keeps appearing. So I have tried nearly everything I have been able to, all to no avail. Please can somebody help?Thanks for your reply. Yes, it is a POP account. Incoming mail is fine. My port for incoming is also 110. But the outgoing port should be 587 (or 24, 465 and 587 as on Mavericks' "Usual Ports" option). I am using the same configuration across three different devices and only the machine running Yosemite is having issues. I notice in the new version of Mail there is no longer the "Usual Ports" option. I am not sure this is the culprit or not. But the fact is no matter how I configure it, it will not send mail for these particular servers. I have multiple clients and only one is affected, meaning I can send email from other email addresses (different hosting contracts) on Yosemite but on this one particular one I cannot.
-
I am no longer able to email to a group
I have been trying for 3 days to send e-mail messages to a group from the contacts I set up in my address book. I have been able to do this for years, and all of a sudden, it does not work. I always get the same message:
Sending the message content to the server failed.
Select a different outgoing mail server from the list below or click Try Later to leave the message in your Outbox until it can be sent.
I have tried sending the message with attachments, without attachents, to a smaller group size, etc. None of it seems to help. I was getting this same error message randomly for the past month or so, but I would just leave it be, go on the internet, then go back and re-send and it would work. Does anyone know how I can fix this? I have called my e-mail provider, and all my settings are correct. They think it's a problem with my Mac.
Thanks,
JulianneFirst, if you can access the email account directly through webmail via your Safari Browser, try that first, so you get the message(s) out ASAP.
If it's an Apple iCloud account, go to www.icloud.com to sign in directly. With OS X 10.6.8, you can still use Mail through the browser, but the other functions of iCloud are not available.
After you've sent out your emails, then you can return to this page and attempt to resurrect Apple Mail...
Do you have multiple email providers linked through Apple Mail?
Is the option 'Use only this server' checked?
There are a couple of extra options and screens for configuring SMTP mail servers that may be hidden unless you know where to look for them.
Highlight the name of the Outgoing Mail Server to 'Edit SMTP Server List'
(Incoming Mail Server works the same way, but you're having a problem with Sending, not Receiving...)
This reveals Account Information and Advanced tabs with additional configuration options.
In some instances unchecking Use Secure Sockets Layer (SSL) makes it work again, but I'm not prepared to address the security concerns that arise without the use of SSL, so if you have any doubts, DON'T UNCHECK SSL. (What is SSL? http://www.digicert.com/ssl.htm)
(Some names and details intentionally obscured for privacy)
Maybe you are looking for
-
A Series of Unfortunate Events
Hello All, I do not usually post concerns or issues but my experience with the customer service of Verizon for the past few months has been so disappointing I felt it necessary to share with customers and warn other Verizon users. In November, I deci
-
Unable to post one time customer to cash journal
Dear All, I have difficulty in posting one time customer to cash journal, it did not prompt me for name and address. However in the website http://help. sap.com/bp_ bblibrary/ 600/documentatio n/N70_BPP_ 04_EN_DE. doc it mention it is able, does not
-
My older M-JPEG quicktime movies play black in Quicktime and Keynote
I was just recently asked to give a presentation that I had put together 3 years ago in Keynote. All of my quicktime movies that Keynote were using were M-JPEG and used to all play great the last time I opened my file. Since Then I've updated my OS
-
How to use IDENT_CURRENT() is SQL. Is this function supported in MS Access. I am using JDBC-ODBC connectivity. I want to get generated Primary Key.
-
HT1926 Problematiche di installazione e disinstallazione
Buongiorno a tutti, dopo anni ho cercato di aggiornare la versione dell'itunes istallato sul mio PC. Dopo la fase di controllo dello spazio disponibile, il programma di istallazione si blocca con la dicitura "impossibile trovare il pacchetto itunes64