Go Daddy UCC Certificate: "ExRCA can only validate the certificate chain using the Root Certificate Update functionality from Windows Update"

Hello,
I have this issue regarding certificate chains while performing Outlook Anywhere connectivity test
by Microsoft Remote Connectivity Analyzer:
"ExRCA can only validate the certificate chain using the Root Certificate Update functionality from Windows Update. Your certificate may not be trusted on Windows if the "Update Root Certificates" feature isn't enabled."
Note: even if I got the error, Outlook Anywhere and
ActiveSync services work fine.
Environment:
- Exchange 2007 with SP3
- Go Daddy Multiple Domains UCC certificate (up to 5 Subject Alternative Names)
I already read and followed instructions on this TechNet post
Can I safely ignore this warning about the SSL cert? Using GoDaddy UCC cert but it is a little bit different by this case.
So after an investigation I understand the issue above is related to SSL certificate
Certification Path (see screenshots below).
NO ERRORS on ExRCA checking
Go Daddy Secure Certification Authority is under Intermediate Certification Authorities
repository
Go Daddy Class 2 Certification Authority is under Intermediate Certification Authorities
repository
Starfield Technologies (http://www.valicert.com)
is under Trusted Root Certification Authorities repository
ERROR on ExRCA checking
Go Daddy Secure Certification Authority is under Intermediate Certification Authorities
repository
Go Daddy Class 2 Certification Authority is under Trusted Root Certification Authorities
repository
Can you add some useful information ?
I'm opening a support ticket at Go Daddy; I hope they could me some positive feedbacks.
Regards,
Luca Fabbri
Disclaimer: This posting is provided "AS IS" with no warranties or guarantees, and confers no rights.

Strange I have a feeling the exrca tool can't validate the godaddy class2 root authority due some older compability and wants to use the older original root authority valicert owned godaddy. Or when the exrca tool is validating the root CA it only has the
goaddy class2 root ca that was issued by valicert and not the standalone cert when doing the comparision. I sent the question to MS and will let you know when I hear back.
You can get rid of it
https://certs.godaddy.com/anonymous/repository.seam
Download the cert
◦gd_cross_intermediate.crt
Then import it into the trusted root cert authority on your CAS boxes. Then you need to delete the other godaddy class2 root authority. Make sure you see the one you imported both will be named goaddy class2 root authority but one will be issued by valicert.
Re-run the test and it will go away, I also saw the error with my domain as well using godaddy and got rid of it by using the new cert authority.
James Chong MCITP | EA | EMA; MCSE | M+, S+ Security+, Project+, ITIL msexchangetips.blogspot.com

Similar Messages

  • IPhone mail : cannot reply, forward or create messages.  Can only delete a message by using the individual slide at the continue arrow.  The icons/controls "Delete" "Reply" "reply All" Flag" Download - .... all gone - they have disappeared.  Help.

    3G Iphone - Verizon: I cannot reply, forward or create messages.  Can only delete a message by using the individual slide at the continue arrow.  The icons/controls "Delete" "Reply" "reply All" Flag" Download - .... all gone - they have disappeared.  Help.

    Restart your iPhone. If that's not work repeat the Reset (Press and hold the Sleep/Wake button and the Home button together for at least ten seconds, until the Apple logo appears.)

  • A can only hear volume when i use the headphones: no ringtones, no music, nothing without the headset. what did i do? it's a 48 hour old phone

    I have done something to my volume. there is no sound unless i use headphones. I must have done something when using suri, but i don't know what. i have turned the phone on and off with no change. please help. the volume is up, and the slider for mute is not on.

    I had a similar problem, I could only hear Siri when I was using headphones.  Without headphones, I would call up Siri and I wouldn’t hear that “ding” nor would she audibly speak back her answer.
    I found out that Siri has its own volume control.  To access it, activate Siri and when the Siri microphone pops up, go ahead and adjust the Siri volume using the volume controls.  I had my regular volume up pretty high but I had the Siri volume all the way down.  This was driving me crazy, now it works fine.
    Chris

  • Can you validate an XMLElement that uses the default namespace?

    We have a partner that we communicate with via XML over HTTP and the schema that they gave us for their request/response does not specify a namespace. I am able to import the schema and create variables from its elements to send the request and get a response back but when I try to validate the response I am getting an error.
    We are using SOA Suite 11g and the bpelx:validate action to try to validate the variable but it consistently gives back the following error message.
    java.lang.IllegalArgumentException: null schema location for ns=null [Cause=null schema location for ns=null]
    I am pretty sure this is because there is no namespace specified in the response data. Is there anyway that I can validate this XML against the schema without a namespace? This is an existing interface that we are converting so we don't have the flexibility to ask the partner to change their interface. I am able to validate the same XML data in XML Spy against the schema and have been able to recreate this problem with a different small xsd with the default namespace.
    I think I can write a java utility to perform the validation and call it using the embedded java action but I am hoping there is a way to do it within the tool.

    Hi,
    For Crystal Design related queries, close this thread and start the thread in the [SAP Crystal Reports Design forums|http://forums.sdn.sap.com/forum.jspa?forumID=300&start=0]
    - Bhushan

  • Help please, I can only see outlines when I use the shape tool in CS5 ?

    When I open action script 2 or 3 in CS5, and draw a rectangle or any shape, I can only see outlines? The problem IS NOT the outlines button that is in the layers palet as I have changed this many times and it has mad no difference and the problem IS NOT because I have selected no fill or colour for the shape.
    If you want to see a screenshot of my computer follow this link as I have exactly the same problem http://forums.adobe.com/message/2927153
    BUT interestingly, when I have opened someone elses .fla work document, I can draw and fill shapes without a problem, which makes me wonder whether I am missing some basis setting when I start with my own new document ??
    Any help would be much appreciated. I am fairly conversant with Photoshop but a newbie in Flash

    I've learned something new since that posting you point to that might help--it has the same effect as using the outline tool on the layer, but globally.  In the main menu select View -> Preview Mode -> and anything except Outlines.

  • HT4009 I would like to make an in app purchase using my $20.00 credit that I have on I tunes. I am using my  i phone5. It does not give me the choice of using the credit that I have, only a credit card. How can I use the credit for the purchase??

    I would like to make an in app purchase using the $20.00 credit that I have on itunes. I am using my i phone5. It does not give me the option of using the credit that I already have, only of using a credit card. How can I use the credt that I already have instead of a credit card?

    Is Settings > General > Restrictions > In-App Purchases: ON (green)?
    Some In-App Purchases works only with credit card.

  • "all my music is unchecked.  I can not check whole playlists by using the top checkmark to select all.  I went to all my playlists, same thing.  I can only press them ONE at a time, which will take about a day to check all of them." Please help.Windows7

    "While in MY MUSIC on itunes, all my music is unchecked.  I can not check whole playlists by using the top checkmark to select all.  I went to all my playlists, same thing.  I can only press them ONE at a time, which will take about a day to check all of them.
    any ideas?  anyone have same problem?  This just happened since last update." I have windows7

    Thanks A Lot! I should have clicked: "This solved my question" But Thanks all the same!

  • Message# AA649 In area 01, you can only post manual dep. up to the amount

    hi friends
    when i do the transaction in ABAA ,it went error said that In area 01, you can only post manual dep. up to the amount  0
    i had select allowed all value in unplan depreciation ,and why the detail message said the The asset does not have any net book value; in this case, you should check the transaction as described above.
    Asset affected: 000025100073-0000
    Diagnosis
    This posting cannot be performed, since manual depreciation can only be posted in the amount of            0.00 in area 01.
    Procedure
    Check the transaction type entered, or change the posting amount.
    Caution:  If the amount concerned is 0, this could be the result of two situations:
    1. The asset does not have any net book value; in this case, you should check the transaction as described above.
    2. The asset has a depreciation key with automatic depreciation calculation. However, if you want to include depreciation in addition to the automatically calculated depreciation, it has to be unplanned depreciation.
    Otherwise, you should use a depreciation key that does not calculate automatic depreciation (SAP-supplied key: MANU).
    thanks

    Hi,
    1)  Transaction type 640 normally is a previous year transaction type. My suggestion is that you have no values from previous years.
    You use the transaction type 640.
    Please check if it works with transaction type 650.
    Check the setting from the transaction types:
    Table TABW (SE16)
    =================
    Trans. Type........Trans.Type grp.
    640.........................64
    650.........................65
    Table TABWG                                                                   
    ==============     
    Trans.Type grp. ...........Curr.-yr.acq. transaction                                                             
    64                                                                            
    65..................................................X      
    The difference between this 2 transaction types 640 and 650 is the sign TABWG-XZUGNE (Current-year acquisition transaction) in the transaction type group.                                                                               
    2. Please see the text passage from 13221 point 2:                                                                               
    2.  An incorrect depreciation key is used. Manual depreciation and        
        automatic calculation of the same depreciation type are mutually      
        exclusive.                                                            
        If another depreciation must be set in addition to the automatically  
        calculated depreciation, there has probably been an unplanned         
        depreciation.                                                         
        If the asset should have only manual depreciation, please use         
        another depreciation key, for example, 'MANU'.     ..."      
    regards Bernhard

  • Is there any kind of Apple Company policy that Apple's iPhone can only be repair or service at the place from where the iPhone have bought?

    Hello,
    I'm Chintan from India. I have visited UK for study and brought iPhone 5 for me. I used it for about 16 days and now its started showing the problem of coverage. I mean, it shows "NO SERVICE" at the place of carrier name and tower symbol.
    My query:
    Do Apple have this kind of worthless service provider policy?
    I have visited the local authorized service center and they are not accepting my iPhone 5 and telling me that they can not accept it for repair or service because I have brought it from UK. I have checked my iPhone 5 status on the Apple Site and it is showing full cover of Repair and Service, then why the local Apple Authorized Service Center is not accepting my iPhone 5?
    Is there any kind of Apple Company policy that Apple's iPhone can only be repair or service at the place from where the iPhone have bought?
    Kindly help me out as I'm stuck with the so called APPLE IPHONE 5.
    Looking for the POSITIVE, SUPPORTIVE and HELPFUL reply.
    Thank You

    You should have read the warranty/support terms before you made your purchase. Had you, you would have found that iPhone warranty/support is only valid in the country of original purchase(except for the EU where warranty/support is EU wide). In your case, your warranty/support is only valid in the EU, as you have now found out...after your purchase. And, you are correct, they will not service the phone in India.
    Always been this way with the iPhone.

  • Hi - I need help. I would like to use my old iPhone 3 as an iPod for music only. Problem is that my phone is locked with a password I can't remember. I havent used the phone since I got my iPhone 4. Anyone who know how I can reset the phone to standard?

    Hi - I need help. I would like to use my old iPhone 3 as an iPod for music only. Problem is that my phone is locked with a password I can't remember. I havent used the phone since I got my iPhone 4. Anyone who know how I can reset the phone to standard installation or just get acces to the phone. There is no SIM card in the phone.

    Hi Lawrence,
    Thanks for your prompt response, however I have first seen it now. I have placed an active SIM card in the iPhone turned it off and on. It now says SIM locked, please write access code. The problem is I don't remember the password. When I connect it to iTunes it tell me that I have to write the password before it can be used with iTunes...... Do you have any good ideas? I see you are from the NYC area.... used to work there back in the early 90´   Those were good days..... What a City

  • I retrieved my serial number for Acrobat 8 Standard from Adobe because my system crashed.  I went to the downloads and can only retrieve Acrobat 8 Pro.  The installer will not take my serial number what can I do?

    I retrieved my serial number for Acrobat 8 Standard from Adobe because my system crashed.  I went to the downloads and can only retrieve Acrobat 8 Pro.  The installer will not take my serial number what can I do?

    Hi floyd99,
    You can download Acrobat 8 Standard from : https://files.acrobat.com/a/preview/80aa8c58-2951-494e-808a-fb61a6b4aa29
    Reagrds,
    Rave

  • When I'm playing games on my Mac, I want to my viewers (from YouTube) to hear whats going on in the game, as far as I know, I can only record my voice audio, and the screen. Is there anyway I can record game audio too?

    When I'm playing games on my Mac, I want to my viewers (from YouTube) to hear whats going on in the game, as far as I know, I can only record my voice audio, and the screen. Is there anyway I can record game audio too?

    When I'm playing games on my Mac, I want to my viewers (from YouTube) to hear whats going on in the game, as far as I know, I can only record my voice audio, and the screen. Is there anyway I can record game audio too?
    You have two basic options. One is to use a commercial screen recording app with access to system audio built into the app and the other is to add a system extension like SoundFlower that allows the QT X screen recorder to access/record the system audio. I use the former so I am not that familiar with SoundFlower but there should be several posts to this forum covering this topic.

  • I have 2 libraries in iPhoto 09 but I can only see one in apple tv, the last one I viewed in I iPhoto why ?

    I have 2 libraries in iPhoto 09 but I can only see one in apple tv, the last one I viewed in I iPhoto why ?

    iTunes sees what iPhoto sees, iPhoto only sees one library at a time.
    Either merge your libraries or upload content from one of your libraries to a service such as Flickr and use the Flickr feature on the Apple TV.

  • If i dont use the display when using the GPS and only listen to the voice instructions can that also makes the iphone overheat even if you dont use the display

    because when i use the gps app in my iphone 4s in the car my iphone gets overheat so
    if i dont use the display when using the GPS and only listen to the voice instructions can that also makes the iphone overheat even if you dont use the display
    will that help?

    When you use your GPS does your iPhone get hot enough to shutdown?  The reason I ask is that I have run my GPS app with the screen brightness set to near max connected to power for hours.  My iPhone got hot, but didn't shutdown.

  • Question: When I want to send SMS and click on the contact, the contact came out with names and numbers, as if the whole contacts are there in the phone. When I open the contact, I can only see 3 contact names and the rest of 4000  contacts are not listed

    Question: When I want to send SMS and click on the contact, the contact came out with names and numbers, as if the whole contacts are there in the phone. However, when I open the contact, I can only see 3 contact names and the rest of 4000 plus contacts are not listed, and it makes you difficult to call through contact

    The iPhone remembers information about previous contacts.
    Complelely independently, you have a Contacts app with a contacts list.  It sounds like your contacts list has 3 names on it.  You need to add a few names.

Maybe you are looking for