MS Exchange 2010 Outook Web App "Untrusted Connection" error in Firefox. No issue with IE or Chrome

I installed Microsoft Root CA Certificate on my Computer. (For Exchange 2010 Outlook Web Access) But Firefox appear "This Connection is Untrusted" error ((Error code: sec_error_unknown_issuer)). IE and Chrome works fine.
My firefox version is 18.0.1.
I want to fix this issue without adding a exception. Please help.

Try to export those certificates in IE and import the certificates in Firefox.
*Tools > Options > Advanced : Encryption: Certificates - View Certificates
If this is to be a root certificate then you need to set the applicable trust bits.

Similar Messages

I have been getting a "Untrusted Connection" error on Firefox randomly for the past 4 weeks, what could be causing it?

For the past about 4 weeks I've have been randomly getting an untrusted connection error whenever i try to search something on google.com or using the google search bar. It will happen for about 5-10 mins then will go away. This will happen across 3 different computers (both mac and pc) and will also happen on Chrome, sometimes at the same time sometimes different times. I've searched around and tried pretty much everything i can think of. The date/time is correct on all computers, cache has been cleared, everythings up to date, contacted the ISP and the router companies and they say its not them so i'm at a complete loss.
Any advice or help would be much appreciated!

Did you check the issuer of the certificate and other details?
You can retrieve the certificate and check details like who issued certificates and expiration dates of certificates.
*Click the link at the bottom of the error page: "I Understand the Risks"
Let Firefox retrieve the certificate: "Add Exception" -> "Get Certificate".
*Click the "View..." button and inspect the certificate and check who is the issuer of the certificate.
You can see more Details like intermediate certificates that are used in the Details pane.
If <b>"I Understand the Risks"</b> is missing then this page may be opened in an (i)frame and in that case try the right-click context menu and use "This Frame: Open Frame in New Tab".
*Note that it is not recommended to add a permanent exception in cases like this, so only use it to inspect the certificate.

How to remove repeated mails in exchange online outlook web app

Hi,
Any help me , how to remove repeated mails in exchange online outlook web app . As we are in process of migrating mailboxes to office 365 . We have migrated 5 mailboxes . But when i checked outlook web app after migration completed , i could see repeated
mails . When i compared with on premise outlook and office 365 outlook web app , there was lot of differences in read and unread mails .
Customer is expecting , same read and unread count should be replicated to office 365 owa.
Please suggest me to prevent this problem . As this is very urgent to give solution to customer .
Big thanks in advance.
Vinoth .

If you've setup Outlook 2013 so it's connected to Office 365, and you've import the .pst file into Outlook, it will be showing as another "mailbox" within Outlook, but default called "Personal Folders" (unless you renamed it when it was created).
You should find that you can simply copy the mail items / folders from Personal Folders into their new home in the Office 365 mailbox. Once that's done Outlook will synchronise the items with o365 which may obviously take a while to complete, but once it's
finished those messages will be available online.

Exchange and Office Web Apps Integration - Wrong Url to Outlook Web App port 444

Hi,
I'm trying to setup Office Web Apps integration with Exchange 2013. Office Web Apps are working fine with SharePoint 2013 and the WAC servers are listed as in a healthy state.
When trying to open an office document from OWA I get the usual "Sorry...we ran into a problem. Please try again"
However I have noticed that the URL that OWA is passing WAC is in the format: https://exchangeservername.domain.com:444/owa/[email protected]/wopi/files...
This is the backend server address! All the internal and external urls for owa, ecp, ews etc are set to https://mail.domain.com and they all seem to be working fine. Client Access and Mailbox roles are on the same server.
If I change the url to https://mail.domain.com/owa/[email protected]/wopi/files... then the office file opens correctly in Office Web Apps
How do I correct the URL that OWA is sending Office Web Apps?
Thanks!

Hi DJL,
If everything works well except open document via OWA, it seems Exchange server 2013 has been configured correctly.
Please follow me to check Office Web Apps Server settings and Integration.
OWAS settings
1. Certificate:
Come from a trusted CA, include FQDN of OWAS farm in SAN field.
Exportable private key.
Friendly name must be unique within Trusted Root Certificate Authorities store.
2. Farm:
New-OfficeWebAppsFarm with following parameters
-InternalURL is the FQDN of the server that runs OWAS
-ExternalURL is the FQDN so that OWAS can be access on the Internet
-CertificateName is the friendly name of the certificate to be used for HTTPS
3. Explore this URL https://mail.domain.com/hosting/discovery
If OWAS works well, you can see a WOPI-discovery XML file in web browser.
Integration
1. Configure OWAS URL via EMS,
Set-OrganizationConfig –WACDiscoveryEndpoint https://mail.domain.com/hosting/discovery
2. WAC stands for Web Access Components.
Check App Log the 140 and 142 Event IDs for MSExchange OWA.
142 means the discovery of the OWAS was successful, 141 means something went wrong.
3. Enable OWAS.
By default, OWA Virtual Directory is already enable WAC Viewing on both public and private computer.
Please run "Get-OwaVirtualDirectory | FL *wac* "to check whether both “WacViewingOnPublicComputersEnabled” and “WacViewingOnPrivateComputersEnabled” parameter is True.
4. Method to collect logs on OWAS.
Run following command in OWAS powershell prompt:
Get-OfficeWebAppsFarm | FL *log*
More details to refer:
http://www.msexchange.org/articles-tutorials/exchange-server-2013/management-administration/exchange-2013-office-web-apps-server-integration.html
Disclaimer:
Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there. Please make sure
that you completely understand the risk before retrieving any suggestions from the above link.
Thanks
If you have feedback for TechNet Subscriber Support, contact
[email protected]
Mavis Huang
TechNet Community Support

After updating to Firefox 33.0.3 why am I getting Untrusted Connection Errors with Yahoo and Amazon?

I have updated to Firefox 33.0.3 and now I am getting untrusted connection errors when trying to go to Yahoo.com and Amazon.com this happens with both http and https. My time is in sync. I tried deleting the cert8.db file.
I have looked at other solutions and they have not worked. These sites were working fine on the previous version for me but now with this new update they are not working. Why hasn't Mozilla fixed this already?

Yes I have tried the steps above. For example, When I try to get to Yahoo web site, I get this:
This Connection is Untrusted
You have asked Firefox to connect securely to www.yahoo.com, but we can't confirm that your connection is secure.
Normally, when you try to connect securely, sites will present trusted identification to prove that you are going to the right place. However, this site's identity can't be verified.
What Should I Do?
If you usually connect to this site without problems, this error could mean that someone is trying to impersonate the site, and you shouldn't continue.
www.yahoo.com uses an invalid security certificate. The certificate is not trusted because no issuer chain was provided. (Error code: sec_error_unknown_issuer)
I do not have the option to do an exception because I can only click on the Technical Details and the Get me Out of Here button.
As I've said in my previous post, I have deleted the cert8.db file, my clock is in sync, and I have tried to do the other solutions but they have not worked.

Installing Exchange 2010 on Server 2008 R2 Get error with Hub Transport Role

Hub Transport Role
Failed
Error:
The following error was generated when "$error.Clear();
          install-MsiPackage `
          -PackagePath ($RoleInstallPath + "TransportRoles\agents\Hygiene\ASEntIRS.MSI") `
          -LogFile ($RoleSetupLoggingPath + "\InstallASEntIRS.msilog") `
          -PropertyValues ("ALLUSERS=1") `
          -UpdatesDir $RoleUpdatesDir
        " was run: "Installing product D:\Program Files\Microsoft SQL Server\Microsoft\Exchange Server\V14\TransportRoles\agents\Hygiene\ASEntIRS.MSI failed. Fatal error during installation. Error code is 1603.".
Installing product D:\Program Files\Microsoft SQL Server\Microsoft\Exchange Server\V14\TransportRoles\agents\Hygiene\ASEntIRS.MSI failed. Fatal error during installation. Error code is 1603.
Fatal error during installation
Elapsed Time: 00:00:01
Client Access Role
Cancelled

Hi,
From the description, I recommend you copy the Exchange installation files to the local machine, or download a fresh copy of Exchange 2010 and then reinstall it.
Besides, please ensure that you install Exchange 2010 on 64-bit edition of Windows Server 2008 R2 Standard with SP1 or Windows Server 2008 R2 Enterprise with SP1.
If the issue persists, please refer to the following KB further troubleshooting.
You receive error 1603 when you try to install the Exchange Server 2010 RU1
https://support.microsoft.com/kb/981474
Hope it helps.
If you need further assistance, please feel free to let me know.
Best regards,
Amy
Amy Wang
TechNet Community Support

Why would Firefox give me an "Untrusted Connection" error where IE and Chrome don't?

I get an Untrustead connection error in Firefox when accessing https://eponline.mom.gov.sg/epol/. Both IE and Chrome trust the site. What's different about Firefox?

This Connection Is Untrusted error message may appear when trying to visit secure (https) websites in Firefox.
It Appears in Google Chrome also..
https://support.mozilla.org/en-US/kb/connection-untrusted-error-message

HP Web Services Setup - Connection error. Check Internet connection.

I am trying to enable HP Web Services but Connection error. Check Internet connection. .
I use static ip with Preferred DNS Address: 8.8.8.8 and 8.8.4.4 and it does not work.
I changed to DHCP also it does not work.
I have a ZTE home modem router connected to the printer.
This question was solved.
View Solution.

Hi MaBek,
Can you check if your printers IP address is valid.
If you have a laptop or PC connected to the same network, open a browser and type the IP address in the address bar and hit enter.
This should open a Embedded web Server page if the IP address is valid.
Here you can navigate to Web Services tab and click on enable to enable web services.
Regards,
Oliver
"Although I work for HP, I'm speaking for myself and not on behalf of HP"--Please mark the post that solves your problem as "Accepted Solution"
"Say "Thanks" by clicking the Kudos Star in the post that helped you.

Publishing Exchange 2013 Outlook Web App with Forefront TMG 2010

Hello guys,
I have published Exchange 2013 via TMG 2010 with pre-authentication. Since this is the first time I am doing it- I want to ask experts for the explanations:).
When I configure Active Sync on mobile, I just type the password and it's starts syncing after 20 sec.
When I use browser and trying to login using TMG logon screen, after I enter credentials (if they were not wrong), I get exchange 2013 logon screen ( because my password was checked by DC's).
I have customized TMG tamplate to Exchange 2013 tamplate, but it did not help- I have two logon screens.
Is it possible to configure TMG for showing only one logon screen ( without disabling pre-authentication) ? Does it work this way?
Did I miss something?

Hi,
Please try to enable FBA for external and internal OWA 2010 users by the methods in the blog below.
There are several ways to accomplish this:
Have internal users pointed to the internal interface of the Forefront TMG and utilize the forms-based authentication logon page offered by Forefront TMG.
Deploy Forefront UAG instead of Forefront TMG. Forefront UAG allows you to have FBA enabled on both the Exchange 2010 Client Access Servers and on the Forefront UAG solution itself.
Publish Exchange 2010 to the Internet using Forefront TMG but do not configure pre-authentication. This way the users need to go through the Forefront TMG solution, but will authenticate directly against the Exchange 2010 Client Access servers.
Configure an additional OWA and ECP virtual directory on the Exchange 2010 Client Access Servers.
Reference:http://www.msexchange.org/articles-tutorials/exchange-server-2010/management-administration/enabling-forms-based-authentication-external-internal-owa-2010-users-exchange-2010-published-using-forefront-tmg-2010-part1.html
Then check the blog
- Creating a custom Forefront TMG 2010 OWA FBA logon page
Note:
Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.
Best Regards,
Joyce
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

All websites down after uninstalling Exchange 2010 from Web Server

Hello,
I successfully uninstalled Exchange 2010 (Client Access Role) from a webserver that hosts a company website and some other web apps, as a last step on a migration to 2013. But after that, some application pools were not started automatically, resulting on a
503 error even after starting the app pools manually.
I was getting IIS event Id 5139.
Fortunately it is a hyper-v server so I applied a snapshot I created prior to uninstalling exchange and got it working again. I need to know what happened before doing it again.
I would like to know about similar scenarios and how did you fix it.
thanks in advance.

Hi RCKSTR,
Are you running website in Exchange? If yes it is not a recommended way of working. Exchange is supposed to a standalone.
Websites will not run if IIS uninstalled.
Ensure IIS is installed and your website settings remains the same.
Thanks, MAS
Please mark as helpful if you find my comment helpful or as an answer if it does answer your question. That will encourage me - and others - to take time out to help you.

Office Web Apps Farm Connection Issue SharePoint 2013

I have servers owa1 and owa2. Owa1 is acting as host and owa2 I joined to office web apps farm that’s is to owa1.
Both these are in office web apps farm and load balanced. Now my question is: From SharePoint Server when I connect , how should i connect while execute PowerShell command in SP server, in the syntax
–servername parameter what should I specify do I need to specify the FQDN of the server name or host name (officewebapps.jdax.corp.local, this is host record created in DNS by mapping to VIP Of the load balancer (owa1 and owa2).
Please help me.
Thanks, Ram Ch

You need to use URL officewebapps for parameter InternalURL
ew-OfficeWebAppsFarm [-AllowCEIP <SwitchParameter>] [-AllowHttp <SwitchParameter>] [-AllowHttpSecureStoreConnections <SwitchParameter>] [-CacheLocation <String>] [-CacheSizeInGB <Nullable>] [-CertificateName <String>] [-ClipartEnabled <SwitchParameter>] [-Confirm [<SwitchParameter>]] [-DocumentInfoCacheSize <Nullable>] [-EditingEnabled <SwitchParameter>] [-ExcelAllowExternalData <SwitchParameter>] [-ExcelConnectionLifetime <Nullable>] [-ExcelExternalDataCacheLifetime <Nullable>] [-ExcelPrivateBytesMax <Nullable>] [-ExcelRequestDurationMax <Nullable>] [-ExcelSessionTimeout <Nullable>] [-ExcelWarnOnDataRefresh <SwitchParameter>] [-ExcelWorkbookSizeMax <Nullable>] [-ExternalURL <String>] [-FarmOU <String>] [-Force <SwitchParameter>] [-InternalURL <String>] [-LogLocation <String>] [-LogRetentionInDays <Nullable>] [-LogVerbosity <String>] [-MaxMemoryCacheSizeInMB <Nullable>] [-MaxTranslationCharacterCount <Nullable>] [-OpenFromUncEnabled <SwitchParameter>] [-OpenFromUrlEnabled <SwitchParameter>] [-OpenFromUrlThrottlingEnabled <SwitchParameter>] [-PicturePasteDisabled <SwitchParameter>] [-Proxy <String>] [-RecycleActiveProcessCount <Nullable>] [-RemovePersonalInformationFromLogs <SwitchParameter>] [-RenderingLocalCacheLocation <String>] [-SSLOffloaded <SwitchParameter>] [-TranslationEnabled <SwitchParameter>] [-TranslationServiceAddress <String>] [-TranslationServiceAppId <String>] [-WhatIf [<SwitchParameter>]]
Hope below article should help you in detail:
http://blogs.technet.com/b/jenstr/archive/2013/03/18/creating-an-office-web-apps-server-2013-farm-with-2-machines.aspx

Exchange 2010 - Outlook Anywhere trying to connect to internal server name first before connecting to proxy server

Hello,
I have an Exchange 2010 question which I will post in the Exchange 2013 section since the Ask a question button in the legacy Exchange Servers section of technet takes me back to the part of Technet where I can only ask questions regarding Exchange 2013.
If someone can point me to a part where I can place a question in an Exchange 2010 forum please let me know.
We have Exchange 2010 setup with a CAS array listening to outlook.internaldomain.com
We have TMG 2010 setup with a rule for Outlook Anywhere, the rule listens to mail.externaldomain.com and traffic that meets this rule is let through to outlook.internaldomain.com.
When I fire up my laptop, which is connected to the internet, and start Outlook and let it configure my profile through autodiscover it sets it up correct and fills the Outlook profile with a servername stating outlook.internaldomain.com and a proxyserver
to be used stating mail.externaldomain.com. After initial setup when my Outlook starts it almost immediatly prompts me for a username and a password so this is working fine.
At the office we have an internal network segment where DHCP is servicing the connecting clients and giving them our internal DNS servers because they need connection to some other network segments which are not available to the internet. This network segment
does not have access to our internal Exchange environment but has full access to the internet. Clients in this network segment do want to use Outlook so using Outlook Anywhere for them is the logical way to go. When I connect my laptop to this network segment
I get handed an IP address and our internal DNS servers, when I start Outlook it takes about two minutes before a the credential prompt pops up and another 2 to 6 minutes after entering credentials before it says all folders are in sync. This is quite long
and our clients find this unacceptable.
I started testing what might be going on here and I have found that when I manually enter external DNS servers the Outlook password prompt will popup in seconds and all is working as expected so it seems Outlook is trying to connect to the internal servername
when using our internal DNS servers (which can resolve outlook.internalnetwork.com) instead of directly going to the proxy server which is to be used for Outlook Anywhere.
When I start a network monitor trace my thoughts are confirmed because when I am connected to the internal network segment OUTLOOK.EXE first tries to connect to outlook.internaldomain.com, it almost immediately gets a response stating that this route is
inaccessible but OUTLOOK.EXE keeps on trying to connect untill some sort of time out is reached (somewhere around two minutes) after which it connects to mail.externaldomain.com and Outlook shows the credential prompt.
So to round it up, when connected to DNS servers that can resolve the internal servername Outlook tries to connect to the internal servername in stead of the external name, Outlook does not reckognize the answer from the network that the internal route is
not acessible (or it does but does nothing with this information).
Has anybody experienced this behaviour in Outlook?
Does anyone have a solution in where I can force Outlook to connect to it's proxyserver and disregard the internal servername?

Thank you for your reply.
The client computers that are experiencing the issues are not domain joined, the only reason I can think of why this is occurring is because the DNS servers are able to resolve the internal hostname of the server, but I would expect Outlook to always use
the proxy server that has been set in the configuration of the Outlook profile. Or at least acknowledging the answer that the initially tried route is inaccessible and immediately continue to the proxy server.
For setting the same hostname for internal and external use, we use different namespaces internally and externally, do you mean setting the external hostname on the CAS array for internal use ? Wouldn't that push all internal communication to the internet
and to the outside interface of the TMG where the server is published with that hostname ?

Can EXCHANGE 2010 USE default app pool - v4?

Hi guys.
I had a problem on Exchange 2010 SP3 with latest cumulative update that I needed to change Default App Pool from 4 to 2.
I don't know what caused changing those numbers to 4, but I'm curious is there any official statement about it, that it should have number 2 and not 4?
Because if I look in this address:
http://technet.microsoft.com/en-us/library/ff728623.aspx
under Microsoft .NET Framework I see table where it's written that
.NET Framework 4.5
is supported in
Exchange 2010 SP3
so I'm a little bit confused/amused.
bostjanc

Hi,
What version of IIS are you using?
I find a related information about Default App Pool for your reference:
http://www.iis.net/configreference/system.applicationhost/applicationpools/applicationpooldefaults
Version
Notes
IIS 8.0
Another value ("v4.0") was added to the
managedRuntimeVersion attribute in IIS 8.0, and its default value was changed to "" instead of "v2.0".
Hope this helps!
Thanks.
Niko Cheng
TechNet Community Support

TS3899 Micrsoft exchange vs outlook web app?

My work email is through microsoft exchange, but recently it moved to an "outlook web app" and now my iPad won't recognize the account and I can't use email on my iPad. Any suggestions?

I access my outlook web interface via safari....i have a page to go to https:\\email.XXXXXXXXXX.org
and then I can type in my login info.
Maybe your IT has something similar?
If there's no web page you may need to talk to your IT department. There may be security protocols or codes that you need to have set to have access.

JSF web app gives javascript error - 'dojo is undefined' and 'webui is unde

Hi,
BACKGROUND: I have created a Netbeans 6 Visual Web Project. I have also integrated my web app with RichFaces 3.1.3. My web application can be viewed properly and correctly when i deploy it on tomcat 6.
ARCHITECTURE: Our server configuration requires IIS to be our web server and tomcat to be our app server. Both are running on different machines. I have successfully linked up IIS 6 and tomcat 6 using the JK isapi_redirector.
PROBLEM: However, when i connect to my app via IIS, my starting page opens but the input box components on that page are not displayed and i get several javascript errors that read - 'dojo is undefined' and 'webui is undefined'.
Any help or advice in this matter will be greatly appreciated.
Thanks!!!

I managed to find a workaround. Thought i should share it with those who are faced with a similar issue.
I found that a bug report had been placed in the past with Apache Dev. However, they had said that they would not modify their logic because the servlet container spec requires it (even though isapi_redirector is only a connector and not a container). They said that there is no way for the isapi_redirector to differentiate between /foo/WEB-INF when foo is a context and when foo is just a sub-directory of the ROOT web application. So, the general consensus was to err on the side of safety and risk blocking a few requests that are valid.
However, this causes a serious issue for those using NetBeans JSF Visual Web Projects. Hence, I created my own flavour of isapi_redirector by modifying the code such that this check is not performed and leaving the onus of checking on Tomcat.
For those who are interested, the simplest way to go about this would be to force the function uri_is_web_inf (in jk_isapi_plugin.c ) to always return FALSE.

MS Exchange 2010 Outook Web App "Untrusted Connection" error in Firefox. No issue with IE or Chrome

Similar Messages

Maybe you are looking for