Go Daddy certificate trust issue

Our IT department has my Exchange account setup for Active Sync. Our firewall allows all the right connections. We bought a Go Daddy cert for the subdomain the mail service is accessible on (e.g. mail.ourcompany.com), and I've confirmed that OWA is setup for mail.ourcompany.com/exchange/. We're running 2003 with SP2.
However, setting up an Exchange account in my iPhone still yields the same errors everyone else gets saying that it doesn't trust the cert and it couldn't verify the account "".
I've tried other tips that I've read about like emailing both the cert for mail.ourcompany.com as well as the Go Daddy intermediate cert and installing them so that they show up in the Settings>General>Profiles area...but even in there it lists the certs an unverified and deleting and creating the Exchange email account still doesn't work and throws the same errors.
Thoughts?

I have a similar problem, nothing I do lets my iPhone connect to the server and we have a self signed cert.

Similar Messages

  • Certificate trust issues - is there any workaround?

    I'm an IT Engineer in big company and i often see annoying troubles with Wi-Fi connection and secured (SSL) SMTP in Mac OS X.
    Some MacBooks works fine, some with exactly the same software version cannot trust certificates of our authorization server for wi-fi and also cannot send mail via SMTP with SSL (i think this is trust issue too).
    So now i have in front of me MacBook Air with Mac Os X 10.6.8. It had worked well but now it has same issue with mail and wi-fi at same time. So i think it have one reason. It also tell me that Mail server certificate is out of date after 11 May 2011, but actually there is a new cert on server issued 12 May 2011.
    Sooo, what a f^%% is going on?
    Any ideas why and what to do?

    Yeah, but its custom coding in conjunction with a 3rd party for the postcode lookup. You also then need to handle the annoying dom manipulation BC does with its code on things like discount code fields, shipping option changes etc effecting your code. You really need to have a good understanding of coding AND BC in this case unfortunatly.
    Possible though, but if you do not want to pay for it to be done or not able to do it yourself - Best to avoid this if you can on the project.

  • Go Daddy Certificate on ISE Repeat accept certificate on Windows 7/8/8.1

    We have moved from a self signed certificate to a Go Daddy certificate to avoid trust issues around self signed certificates.  IOS devices continue to work fine, but Windows devices have to accept the certificate trust many times.  Sometimes it takes 4-6 times clicking connect while on some machines it takes 10-14 times of clicking connect when it prompts you to verify the certificate.  Sometimes it will never connect and you have click terminate once and then click connect a few times.  What is the deal?  This happens equally on Windows 7, 8, and 8.1 machines when connecting to the ISE SSID the first time.  This also only happens when using the Microsoft PEAP.  On my machine, I have an Intel WIFI card so I have the option of using Intel control and Intel PEAP instead of Microsoft.  This works fine.  Something to do with the Microsoft supplicant and ISE on this trust?  Anyone else have this issue or know how to fix it?  The system does work.  It is just annoying for low end users who don't understand to just keep clicking connect...windows will believe you eventually.
    More information: I have also installed the provided Go Daddy intermediate cert in Intermediate Certification Authorities and in Trusted Root Certification Authorities.  Neither help the process.

    #8 The Start Menu and User Interface
    1. The Start Menu
    Allow Drag and Drop from the left list to the right pinned icons. Update build 10041, Microsoft have done this.
    The Start menu is bloated with Metro Apps, making it more cumbersome to find useful installed programs. Example of Start Menu to the left bloated with Metro Apps.
    These should all be in a Windows Apps folder similar to all the (more useful) items in the Windows Accessories folder.
    2. Windows and X Menu (Right Click Start)
    Please add your votes to my Windows UserVoice suggestion here.
    Add the following to the “Windows and X” menu:
    Windows Defender
    Windows Defender Offline
    Devices and Printers
    .iso to Bootable USB Utility
    "Settings" → This definitely has to be here
    Make the Windows and X Menu look like part of Windows 10.
    3. Windows Defender
    Add it to the Windows and X Menu as described above and also add right click context menus like Microsoft Security Essentials had:
    4. Minor Feedback
    I'm not a great fan of the new icons, the folders are too bright and it looks like they have been drawn in Microsoft paint. The Recycle bin particularly looks terrible.

  • Custom STS trust issue with SharePoint

    Hello,
    This is my first time creating a custom STS and I've been running into some problems with it. I'm using VS 2012 on SharePoint 2013.
    I have created a custom STS that I’d like to use to authenticate users to SharePoint. I created simple stand along web-application that I was using to test logging in with the STS and it seemed to work fine. The environment I’m using is as below:
    A single App/WFE dev server. SQL is separate.
    A custom STS site that I deployed to the server. I gave it the URL
    http://customsts.dev I added an entry to the local hosts file for it.
    I used PluralSight’s SelfCert 3<sup>rd</sup> party tool to create a new certificate. I added that cert to the Trusted Root Certification Authorities and also to the SharePoint Certificates stores on the server via the MMC.
    I use the certificate Key for signing the claim in the STS.
    I created a sample stand-alone Non-SharePoint web site to log in using the STS and it seems to work.
    dfd- Next,
    I created a SharePoint web-application and called it http://servername:1111.
    Next I ran the following powershell set up a new trusted identity provider in SharePoint:
    $cert = New-Object System.Security.Cryptography.X509Certificates.X509Certificate2("e:\pla\customsts.dev.cer")
    $map1 = New-SPClaimTypeMapping "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress" -IncomingClaimTypeDisplayName "EmailAddress" –SameAsIncoming
    $realm = http://servername:1111/_trust/
    $signinurl = https://customsts.dev/Account/Login
    New-SPTrustedRootAuthority -Name “customsts.dev” -Certificate $cert
    New-SPTrustedIdentityTokenIssuer -Name "customsts.dev" -Description "Passport STS" -Realm $realm -ImportTrustCertificate $cert -ClaimsMappings $map1 -SignInUrl $signinurl -IdentifierClaim $map1.InputClaimType
    I set the customsts.dev as the Trusted Identity Provider for the web-app at 1111.
    I noticed that when I try to log into the web-application, I get the option to pick the authentication, and then get redirected to the login page of the customsts.dev STS. When I attempt to log in, I get routed back to SharePoint and see this error in
    the ULS logs:
    Application error when access /, Error=The issuer of the token is not a trusted issuer. 
     at Microsoft.SharePoint.IdentityModel.SPLocalIssuerNameRegistry.GetIssuerName(SecurityToken securityToken)   
     at Microsoft.IdentityModel.Tokens.Saml11.Saml11SecurityTokenHandler.CreateClaims(SamlSecurityToken samlSecurityToken)   
     at Microsoft.IdentityModel.Tokens.Saml11.Saml11SecurityTokenHandler.ValidateToken(SecurityToken token)   
     at Microsoft.IdentityModel.Tokens.SecurityTokenHandlerCollection.ValidateToken(SecurityToken token)   
     at Microsoft.IdentityModel.Web.TokenReceiver.AuthenticateToken(SecurityToken token, Boolean ensureBearerToken, String endpointUri)   
     at Microsoft.IdentityModel.Web.WSFederationAuthenticationModule.SignInWithResponseMessage(HttpRequest request)   
     at Microsoft.IdentityModel.Web.WSFederationAuthenticationModule.OnAuthenticateRequest(Object sender, EventArgs args)   
    I have tried searching for solutions to this and seem to have exhausted all the options. Does anyone have any experience with this? I'm wondering if there's anything that I'm doing incorrectly in setting up the STS. Any help in this regard would be very
    appreciated.
    Thanks,
    Sudharsan.

    Hi,
    the certificate you used to create trust is a self signed cert ???
    if yes try this with a domain certificate.
    Whenever you see a reply and if you think is helpful,Vote As Helpful! And whenever you see a reply being an answer to the question of the thread, click Mark As Answer

  • Issuer of token is NOT a trusted issuer

    hi,
    am facing an issue in SharePoint portal which connects to ADFS sever.
    I have verified Provider name, Certificate details in SharePoint and all ADFS configuration settings in ADFS sever,
    found no configuration issue.
     if you know any resolution steps , then pls let me know . Below is error message we are getting when we access the SharePoint
    site

    Hi Benjamin,
    According to your description, my understanding is that you got an error when you connected ADFS to SharePoint 2010.
    1.Verify the appropriate certificate chain is present on the SharePoint server in both the trusted root authorities as well as in the SharePoint folder within the Certificate MMC snap-in.
    2.Verify that you actually used the right certificate when specifying the certificate path when building the System.Security.Cryptography.X509Certificates.X509Certificate2 object to pass into your SPTrustedIdentityTokenIssuer.
    Here are some similar post your reference:
    http://www.sharepointsecurity.com/sharepoint/sharepoint-security/sharepoint-and-adfs-securitytokenexception-the-issuer-of-the-token-is-not-a-trusted-issuer/
    http://blogs.technet.com/b/speschka/archive/2012/05/17/the-issuer-of-a-token-is-not-a-trusted-issuer-craziness-with-saml-claims-in-sharepoint-2010.aspx
    http://social.technet.microsoft.com/Forums/sharepoint/en-US/bc42ffc3-02b6-4d4d-bd47-d4cbeccc9df2/sharepoint-2010-and-adfs-20-cert-problem
    http://blogs.msdn.com/b/ekraus/archive/2010/03/22/sharepoint-2010-claims-based-auth-with-adfs-v2.aspx
    I hope this helps.
    Thanks,
    Wendy
    Wendy Li
    TechNet Community Support

  • How to include the user as a recipient of the email generated when a smart card certificate is issued by an Enrollment Agent on behalf of a user.

    How can I add the requester name in the To: field of the email generated when a Smart Card certificate is issued on his behalf.
    I want to address the possibility of someone (Enrollment Agent) issuing a Smart Card certificate on behalf of a user, assign a PIN and use it without the user's knowledge.
    There doesn't seem to be a way in the registry to define a variable to be used in a manner similar to the TitleArg & TitleFormat way of using %1.
    Jamal Saket OSFI Canada

    Hi,
    Thank you for your question.  
    I am trying to involve someone familiar with this topic to further look at this issue. There might be some time delay. Appreciate your patience. 
    Thank you for your understanding and support.
    TechNet Subscriber Support
    If you are
    TechNet Subscription
    user and have any feedback on our support quality, please send your feedback
    here.
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • Re-Imaging and Security Related Trust Issues

    Hello,
    Yesterday, I asked the question about how to fix having trust issues all the time when re-imaging computers in a school environment. I am using Windows Server 2008R2 and a Windows 7 Image created in FOG image program. The machines we use are HP5100 Desktop
    machines.  I didn't feel that I properly explained in the first post how we re-image the machines. I am hoping this will give you a better idea of what we are doing, and you can help me figure this issue out. Thank you in advance.
    Step 1: Bring Windows 7 Image down to an HP5100 Desktop, update plugins and send image update back up in Fog
    Step 2: Delete all machines out of the active directory for specified labs.
    Step 3: Re-image school labs of 30 machines each
    Step 4: Rename each machine with unique id, example : BJSHS203S01DW7 (name of school, lab #, Student #, and OS)
    Step 5: Join the domain
    Step 6: Make necessary adjustments, and use deep freeze to freeze machines up
    Those are the steps we use when re-imaging, and so far for the past two years we have sporadic issues with two labs in particular with receiving trust-relationship message, and also sometimes get a message that says there are no servers available. When this
    happens, then I need to go to the machine unfreeze it, unjoin the domain, delete the name from the active directory, and then rejoin the domain. Sometimes this works but more often than not it doesn't work so well, and then I have to go through the whole process
    again. We do not use sysprep on our machines.
    So my question is this : What am I doing wrong? Is there anything you can recommend to fix this problem so that I don't have to continue to fix the machines and waste time?
    Thank you in advance, I appreciate your help!!
    Angie

    Deep Freeze may be causing your problems.  Have you read this article from Deep Freeze makers about trust relationship issues?
    http://support.faronics.com/Knowledgebase/Article/View/365/8/computers-running-deep-freeze-loose-connection-to-or-fall-off-the-domain-with-an-error-that-the-trust-relationship-between-the-domain-controller-and-the-workstation-has-failed

  • How do I get lost Sylvan OCP certificates re-issued/confirmed

    I had done my Oracle 7, 8, 8i and 9i DBA OCP through Sylvan Prometric years ago and during a break-in at my house, the certificates got stolen. I now need to urgently get hold of these certificates, but Sylvan says that they are archived and I need to contact Oracle
    I registered with Pearson Vue and after receiving my username and password, I went into my account history, but nothing shows up, as I had not done my certifications through them.
    How do I go about to get these certificates re-issued/verified?

    You should contact [email protected] and provide your name, as it was provided when you registered for your exam, your Prometric ID and the list of certifications in question. They will not be able to provide you with score reports from your exams, but they will be able to assit with replacing any certificates that you have earned. You should also let them know that you have created your profile with Pearson VUE and ask them for the information that you will need to get authorized on CertView. They should be able to provide you with the exact info to enter so that you won't have to wait for manual authorization.
    Regards,
    Brandye Barrington
    Certification Forum Moderator

  • $10 Rewards Certificate earned & issued yesterday, NOT showing in account today! :(

    I've tried calling 3 times, emailing your company and even discussing this matter with your support team via Twitter, and have had different answers, so I thought that I'd try here.
    I looked at my My Best Buy account today, and saw that I only had 31 points. Apperantly, yesterday I had been issued my $10 rewards certificate, yet it's NOT showing on my account! Your support team on Twitter said that it should've been there automatically, yet I was told by 3 agents over the phone that I had to wait at least 24 hours or longer for it to show up. I was awarded a tiny customer satisfaction reward (1 point).
    I was going to use the certificate + 2 mostly used gift cards towards a movie that just came out and is now on sale, but now I can't buy it from your store until the certificate is issued.
    Please resolve this matter very soon so I can buy my movie!
    Thank you in advance for your quick reply!

    Hello FS81,
    I hope you have enjoyed your Wednesday so far.
    I 100% agree with you that it should not be that difficult to get a straight answer about the status of your $10 certificate.  As you may read in other threads on the forum, a certificate will usually post immediately; however, there are times where it may take a little longer, but it should not take more than 24 hours.  Please feel free to send me a private message with the information below if you still cannot access your certificate after 24 hours and I will see what I can do to help.  A private message can be sent by clicking on the blue button in my signature labeled "Private Message."
    Name
    Phone #
    Email address
    My Best Buy™ ID #
    Thank you for taking the time to post to the forum and for being a My Best Buy™ member.
    Derek|Social Media Specialist | Best Buy® Corporate
     Private Message

  • Certificate Trust (Pinning) disabled after silent installation

    When we install EMET 4.1 (MSIEXEC.exe /qb!- /i "EMET Setup.msi" ALLUSERS=1 REBOOT=REALLYSUPPRESS) and import te Popular Software.xml and CertTrust.xml settings with EMET_Conf.exe the Quick Profile Name is set to custom Security setting and the
    Certificate Trust (Pinning) option is disabled. The import of the CertTrust.xml worked because the pinning rules en protected websites are visible.
    How can we use the Recommended Security Settings and enable the Certificate Trust (Pinning) option after installation? I tried to use a Group Policy but there are no group policy settings for the Certificate Trust (Pinning) option.
    Has someone else experienced this and how cal we solve this?
    Regards,
    RK

    The Group Policy settings for EMET 5.0 look the same as those for EMET 4.1. The 'problem' that is the system mitigation Certificate Trust (Pinning) is disabled after a silent installation is not (yet) fixed in EMET 5.0 technical preview. On the other hand
    I found out that "EMET_CONF.exe --system Pinning=Enbled" enables the system mitigation Certificate Trust (Pinning). The Quick Profile Name remains set to custom Security setting but I guess that's the settings are te same as Recommended Security Settings.
    Regards,
    RK

  • SCUP 2011 Verisign Certificate Export Issue

    Hi folks,
    I'm trying to export a Verisign .pfx certificate to my SCUP 2011 Install however after exporting it doesn't ask for the password.
    And when I exit out of the settings page, I don't see the corresponding CN mentioned next time when I open the settings page.
    There's nothing I get to see in the SCUP.log file as well.
    Can anyone assist or point towards the cause.
    Certificate Details--
    Issued to-- Orgname
    Intended Purpose EKU-- Code-Signing
    Public Key-- 2048

    Hello,
    This blog discussed how to install SCUP with silf-signed certificate
    http://gerryhampsoncm.blogspot.com/2013/04/sccm-2012-sp1-step-by-step-guide-part_27.html
    Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

  • Reward Certificate Auto-Issue Issue

    I am having an issue with my auto-issue BB reward certificate. One was auto-issued to me around midnight today after I hit the point requirement, but my account is showing 0 certificates although the points have already been deducted from the account. Please assist.
    Solved!
    Go to Solution.

    Good morning oicyu8chu and jcp42877,
    While a certificate is generally available within a matter of minutes of being issued, there are occasions where it might be delayed.  It could possibly take a few hours, but it should never take more than a day.  That time frame is the same for certificates that were automatically issued and certificates that were requested by the member.
    I looked over both of your My Best Buy™ accounts and do see that a certificate was issued yesterday.  You should be able to view your certificate by logging into BestBuy.com and clicking on "Rewards" under the My Best Buy™ tab at the top of the page.  If you are for some reason still unable to access your certificate, please feel free to send me a private message and I will see what I can do to help.  A private message can be sent by clicking on the blue button within my signature.
    Thank you for posting to the forum!
    Derek|Social Media Specialist | Best Buy® Corporate
     Private Message

  • Multiple certificates on Issuing CA server

    Hi,
    Due to errors multiple certificates were issued from Root CA server for SubCA. Although old certificate was revoked from Root, but I see 2 certificates on Issuing CA. Also, because of 2 certificates, 2 CRLs are getting published everytime for each. Although
    when I see web server certificate issued for IIS, it was signed by new certificate of Issuing CA. Also, in PKIview, I see CDP path for this CA with new CRL.
    But my questions is that how shall I remove old one from Issuing CA as I am not gettign that option. Also, in AD i see 2 certficaates published for that CA. Will that cause any issue.
    Thanks
    Neha Garg

    This is actually a normal state in PKI. When you renew a sub CA with a new key pair, ot will result in multiple CRL files.
    - there is no need to remove the previous subca cert
    - there is no need to revoke the previous subca cert (unless there are config or security issues)
    - make sure the AIA paths use %4 in the paths to keep separate versions
    - make sure that the CDP paths use %9 in the paths to keep separate versions
    - make sure you publish *all* versions of .crts and .crls to *all* publication points
    You need to leave all versions of the CA certs in play so that both current and previously issued certs can be validated
    Brian

  • Certificate Trust (pinning rules) not work.

    Windows 7 SP1 x86, EMET 4.1 U1, IE 11
    Stopped working function Certificate Trust (pinning rules).
    There are no reports of EMET_Agent you visit the site
    that has expired rules. There is only
    the message to Event Viewer. How do I fix
    this problem to EMET_Agent reported
    expired rule at the entrance to the site?

  • Security certificate was issued by a company you have not choosen to trust.

    This issue is new to our client that is running Outlook 2010 (on a Win 7 machine) and connecting to an Exchange 2007 box. 
    There is only one Exchange box.  I have tried the suggestions with assigning the certificate to the “Trusted Root Certification Authorities” area. 
    I have launched the “certmgr.msc” and see the “mail.domain.com” certificate listed. 
    I deleted and readded it as well.  We have a signed 3<sup>rd</sup> party certificate that does not expire until 2016. 
    I have uninstalled and reinstalled Outlook 2010 on the machine. 
    I have also unchecked the “use Cached Exchange Mode” in the “Change Account Settings” area. 
    I have been searching for a solution for this for two weeks now. 
    Everything I have read has to do with Exchange 2010 and Outlook 2010 working together. 
    I have attached the error, I’m sure most that are reading this have seen it. 
    I’m not sure if there is a setting I’m missing on the machine, or what is going on. 
    Thank you to all that have read this.  I look forward to additional advice for a solution.

    Wendy,
    Thanks for the reply.  I have tried this solution multiple times. 
    I have added the certificate to the trusted root authority. 
    I was still getting the issue.  I then removed the certificate from the certificate management console. 
    I then followed the directions again, and checked to make sure the certificate was listed under the “Trusted Root Certification Authorities store.” 
    Please let me know if you have any other suggestions.
    Who issued this cert? What 3rd party? You shouldnt have to do anything for a trsuted 3rd party cert unless something is messed up on the certificate chain.
    When you click on the View Certificate, is it the correct 3rd party cert?
    Andy,
    The 3rd Party is Go Daddy.  The cert is good until 2016.  When I cick on view certificate it has the correct issued by name and valid from dates.  The only error is "Windows does not have enough information to verify this certificate." 
    When I click on the Certification Path the box at the botton  "Certificate Status:" has a note "This certificate is OK."  Please let me know your thoughts on this.

Maybe you are looking for