New Edge Transport install - required certificate?

I'm getting an error with my ET install:
Exchange Server component Edge Transport Role failed.
Error: Error:
The following error was generated when "$error.Clear();
Install-ExchangeCertificate -DomainController $RoleDomainController -Services SMTP
" was run: "Access is denied.
Access is denied.
I was going to try to install a certificate manually, but I actually am not sure what the requirements of the cert are. This is in a test environment, so nothing live is affected. I was going to just try to self-sign a cert for the server and install it.

Can you post the error portion from ExchangeSetup.log to get more idea where it is giving access is denied error?
Blog |
Get Your Exchange Powershell Tip of the Day from here

Similar Messages

Exchange 2013 Edge Transport install fails

I'm trying to install the Edge Transport for Exchange 2013 but it gets to step 7 of 9:
then give's the following error
Error:
The following error was generated when "$error.Clear();
new-ExchangeServer
" was run: "Value cannot be null.
Parameter name: Cannot get child of ADObjectId: this is a GUID based ADObjectId.".
Then in event viewer I have the following two events.
Watson report about to be sent for process id: 260, with parameters: E12IIS, c-RTL-AMD64, 15.00.0847.032, ExSetupUI, M.E.Data.Directory, M.E.D.D.ADObjectId.GetChildId, System.ArgumentNullException, 2ac6, 15.00.0847.031.
ErrorReportingEnabled: True
and
Exchange Server component Edge Transport Role failed.
Error: Error:
The following error was generated when "$error.Clear();
new-ExchangeServer
" was run: "Value cannot be null.
Parameter name: Cannot get child of ADObjectId: this is a GUID based ADObjectId.".
I've rebuilt the server but since it has something to do with the GUID I assumed it wouldn't work but I was grasping at straws and it didn't fix the issue.
I can run the setup again and it does finish but it doesn't show up in the list of servers in the ecp management. I've yet to find a solution on this issue if anyone has a suggestion or two it would be greatly appreciated.

Thanks for response.
when I run Get-ExchangeServer I get the following
Name Site ServerRole Edition AdminDisplayVersion
Exchange03 Edge Standard... Version
15.0 (Bu...
and the errors that are in the log
[02/17/2015 20:06:33.0084] [0] [ERROR] Setup encountered a problem while validating the state of Active Directory: ADAM is installed on this machine; only the Microsoft Exchange Edge Transport server role may be installed. See the Exchange setup log
for more information on this error.
[02/17/2015 20:07:50.0288] [1] The following 1 error(s) occurred during task execution:
[02/17/2015 20:07:50.0288] [1] 0. ErrorRecord: Service SMTPSVC was not found on computer '.'.
[02/17/2015 20:07:50.0288] [1] The previous errors were generated by a non-critical task and will be ignored.
then I have a load of error that failed to load dependency below is a small sample
[02/17/2015 20:07:57.0648] [2] Process standard output: Installing assembly C:\Program Files\Microsoft\Exchange Server\V15\bin\edgetransport.exe
Failed to load dependency Microsoft.Management.OData of assembly Microsoft.Exchange.Configuration.ObjectModel, Version=15.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35 because of the following error : The system cannot find the file specified. (Exception
from HRESULT: 0x80070002)
Failed to load dependency Microsoft.Ceres.InteractionEngine.Processing.BuiltIn of assembly Microsoft.Exchange.Data.Storage, Version=15.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35 because of the following error : The system cannot find the file specified.
(Exception from HRESULT: 0x80070002)
Failed to load dependency Microsoft.Ceres.NlpBase.RichTypes of assembly Microsoft.Exchange.Data.Storage, Version=15.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35 because of the following error : The system cannot find the file specified. (Exception
from HRESULT: 0x80070002)
Failed to load dependency System.IdentityModel.Tokens.Jwt of assembly Microsoft.Exchange.Security, Version=15.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35 because of the following error : The system cannot find the file specified. (Exception from
HRESULT: 0x80070002)
Failed to load dependency Microsoft.Passport.RPS of assembly Microsoft.Exchange.Security, Version=15.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35 because of the following error : The system cannot find the file specified. (Exception from HRESULT:
0x80070002)
Thanks

Exchange SP1 Edge Transport Install Error

Hi everyone,
I've successfully installed multiple Mailbox and CAS 2013 SP1 servers into an existing Exchange 2010 environment.
However, when I get to the Edge Transport role on a separate server, at step 7 of 9, it throws the following error:
Error:
The following error was generated when "$error.Clear();
new-ExchangeServer
" was run: "Value cannot be null.
Parameter name: Cannot get child of ADObjectId: this is a GUID based ADObjectId.".
Any ideas what could be causing this? I haven't been able to find anything of significance while searching around...
Thanks!

Hi,
Make sure prerequisites for Exchange 2013 Edge Transport server role are met. For more details about this, you can refer to the following article.
Exchange 2013 Prerequisites
http://technet.microsoft.com/en-us/library/bb691354%28v=exchg.150%29.aspx#WS2012Edge
If you have checked above, and this issue persists, please check the set up log to see if there is related error message to narrow down the issue.
Besides, here is an article about Edge Server installation for your reference.
Install the Exchange 2013 Edge Transport role using the Setup Wizard
http://technet.microsoft.com/en-gb/library/dn635117(v=exchg.150).aspx
Best regards,
Belinda
Belinda Ma
TechNet Community Support

Downloading the new Edge wont install after download.

I'm trying to download the new version of Edge off the cloud downloader. It downloads fine, but when it goes to install i get an error listed below. Every other program seems to be working just fine, and there is no connections being blocked by my firewall.
Exit Code: 7
Please see specific errors and warnings below for troubleshooting. For example, WARNING: DW020 ...
-------------------------------------- Summary --------------------------------------
- 0 fatal error(s), 0 error(s), 3 warning(s)
WARNING: DW020: {E705A411-1622-40E3-902F-3109F34CCE60} Adobe Edge Animate 1.0.0.0 conflicts with: {72CC24A1-A3A8-49CE-B1FF-0045356483B2} Adobe Edge Animate Preview 1.0.0.0
Please uninstall these products, restart your computer and then run this installer again.
WARNING: DW020: NOTE: Cannot set action to the payload {E705A411-1622-40E3-902F-3109F34CCE60} Adobe Edge Animate 1.0.0.0 as conflicting payload is installed.
WARNING: DW020: {E705A411-1622-40E3-902F-3109F34CCE60} Adobe Edge Animate 1.0.0.0 conflicts with: {72CC24A1-A3A8-49CE-B1FF-0045356483B2} Adobe Edge Animate Preview 1.0.0.0
Please uninstall these products, restart your computer and then run this installer again.

I had the same problem, but I just moved Edge preview to the trash instead of uninstalling it via the Adobe uninstall.
Restored Edge from time machine, uninstalled the right way and was able to install Edge Animate.

Deploy Exchange 2013 Edge Transport Server for multi-site environment

Hi,
I have a multi-site Exchange 2013 environment. The configurations are as below.
Active Directory Sites and Exchange Servers.
SiteA - EXMB1 & EXCAS1
SiteB - EXMB2 & EXCAS2
SiteC - EXMB3 & EXCAS3
All sites are connected via VPN. (Good speed. No latency issues)
All the three Mailbox Servers are in DAG. Only one mailbox database. All servers running Exchange 2013.
I am planning to deploy Edge Servers in the infrastructure (I am doing it for the first time). Normally, it will be in DMZ.
Now, I can deploy 2 Edge Servers for reliability.
Question.
1. Can I deploy 2 Edge Servers and create subscription to all the mailbox server in 3 different site? Or, is it like one edge server can make subscription to only mailbox servers in one Active Directory Site? I am not sure about this and could not find much
information from TechNet.
One Edge Server can make subscription to all 3 mailbox server in 3 sites. Similarly, I can make the subscriptions in the second edge server as well. Configure 2 external MX records with the same priority so that there will be some load balancing.
Also, in such a case if the mailbox database become active from a different site, I need not make any new changes to the Edge Servers right?
2. If the first way is not correct, I will have to deploy 1 Edge Server each for each of the Active Directory Site. (In DMZ only, not in domain)
Make Edge Subscription to the mailbox server in corresponding site.
Make 1 MX record and point it to the Edge Server which is subscribed to the Mailbox Server from which the Database is Active. The problem is, every time will have to change the DNS record when ever the database copy is activated from a different mailbox
server. And the issues with propagation.. delay..
I am not sure which of the above 2 ways will work. Appreciate suggestions from anyone who have previous experience with similar infrastructure.
Thanks in advance. :)

Hi
One or more Edge Transport servers can be subscribed to a single Active Directory site. However, an Edge Transport server can't be subscribed to more than one Active Directory site. If you have more than one Edge Transport server deployed, each server can be
subscribed to a different Active Directory site. Each Edge Transport server requires an individual Edge Subscription.
A subscribed Edge Transport server is associated with a particular Active Directory site. If more than one Mailbox server exists in the site, any of them can replicate data to the subscribed Edge Transport servers.
I don't think there is a solution to subscribe edge servers for more than 1 site. Edge Servers can be scoped only to one site.
Remember to mark as helpful if you find my contribution useful or as an answer if it does answer your question.That will encourage me - and others - to take time out to help you Check out my latest blog posts on http://exchangequery.com Thanks Sathish
(MVP)

Mail flow to Edge Transport from a different AD site

Trying to define a solution for *outbound* load balancing from Exchange 2013 organisation between Edge Transport servers.
Setup:
1 Edge Transport server in SiteA
1 Edge Transport server ins SiteB
Both subscribed to the AD site in SiteA and are therefore on the same send connector (to allow automatic load balancing and failover)
Situation:
Lets say all MBX/CA servers in SiteA go offline. Can an MBX/CA server in SiteB send email directly to the Edge Transport that is subscribed to the AD site in SiteA, or does there need to be an MBX/CA server available in SiteA to hop through?
I'm hoping for an answer to be backed up clearly by a TechNet article or authoritative source as I can't really work with guesses.
Thanks.
Let’s say I have an Edge Transport subscribed to ADSiteA. All MBX/HT servers in ADSiteA go down. Can a MB/HT server in ADSiteB send an email directly to an Edge Transport subscribed to ADSiteA, or does it need to hop through an MBX/HT in the
subscribed site?
David

Hi David
One or more Edge Transport servers can be subscribed to a single Active Directory site. However, an Edge Transport server can't be subscribed to more than one Active Directory site. If you have more than one Edge Transport server deployed, each server can
be subscribed to a different Active Directory site. Each Edge Transport server requires an individual Edge Subscription.
A subscribed Edge Transport server is associated with a particular Active Directory site. If more than one Hub Transport server exists in the site, any of them can replicate data to the subscribed Edge Transport servers.
I dont think there is a solution to subscribe edge servers for more than 1 site
Remember to mark as helpful if you find my contribution useful or as an answer if it does answer your question.That will encourage me - and others - to take time out to help you Check out my latest blog posts on http://exchangequery.com

Upgrade from EDGE 3.0 -- EDGE 3.1: What to do with the new SAP transports?

Hello together,
we upgraded our EDGE 3.0 System to EDGE 3.1.
Also we upgraded the SAP integration kit.
Everything seems to work fine.
With the EDGE 3.1 Integration pack there are also new SAP transports included.
Now there are a few questions. Hope someone can help me with this
Do we have to import them?
Can we still use the "old" transports already imported in SAP?
Can we just "override" the "old" transports?
Is there an performance improvement (especially with WebI) with the new transports?
Thanks very much in advance!
With kind regards
Sebastian

Ingo,
If I do a fresh install of BOXI 3.1 Edge SP2...do I have to import the original transports or can I go directly to the SP2 "version" of the transports?
Thanks.
Kevin

How to install and configure ms exchange server 2007 both role hub and edge transport role in one network

How to install and configure ms exchange server 2007 both role hub and edge transport role in one network

Hi,
Edge role is design for perimeter networks, to keep security risks minimum. So it’s not recommended to have edge role in internal network. Must have separate network or subnet for edge services.
If you are playing around it in labs, then you can put edge role within same subnet as other exchange roles and no specific requirements in that case.
Thanks.
MachPanel - Premium Cloud Automation Solution

Edge transport new subscription error

I have an edge transport server (exch 2013 SP1) in a perimeter environment. The networks are flat during setup. But when running the new-edgesubscription, I get the error below. I am running in the exchange PS. Not sure how else to run it to avoid
the error below. Any help would be greatly appreciated.
[PS] C:\Windows\system32>New-EdgeSubscription -FileName "C:\EdgeSubscriptionInfo.xml"
New-EdgeSubscription : You can't use the FileName parameter when running this command inside your Exchange
organization.
At line:1 char:1
+ New-EdgeSubscription -FileName "C:\EdgeSubscriptionInfo.xml"
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : InvalidOperation: (:) [New-EdgeSubscription], InvalidOperationException
+ FullyQualifiedErrorId : [Server=EDGE01,RequestId=8ded90eg-f44a-4378-a544-a68c985bb61d,TimeStamp=3/8/2015 3:
08:59 PM] [FailureCategory=Cmdlet-InvalidOperationException] 625C8CCE,Microsoft.Exchange.Management.SystemConfigur
ationTasks.NewEdgeSubscription
[PS] C:\Windows\system32>

Hi mvkes1,
Thank you for your question.
There are some factors we should make sure:
Run this command on Edge server.
Edge server is independent of other Exchange role on separated server
Edge server didn’t join domain
If there are any questions regarding this issue, please be free to let me know.
Best Regard,
Jim
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
Jim Xu
TechNet Community Support

I am unable to access sites which require an ssl certificate. I have installed the certificates and enabled access by applications.

Firefox 8 does not ask for the certificate, it simply refuses to display the page. Running an asus transformer on android 3,on my desktop accessing the same site firefox asks me to choose the certificate. Initially I was asked to install the certificates,firefox mobile does not ask. Android lets me install the certificate

I'd recommend reposting in the Boot Camp forum, that is where the Boot Camp and Windows gurus hang out.
Good luck.

WINDOWS MANAGEMENT FRAMEWORK 4.0 - A required certificate is not within its validity period

Hello,
I can't figure out if this is because the Root Certificates were updated in April 2014 then apparently expired by Microsoft or if the PowerShell installer signed this file with a bad software release signature??
We were deploying PowerShell 4.0 (Windows6.1-KB2819745-x64-MultiPkg.msu) with ConfigMgr 2012 with a dependency of .NET Framework 4.5.1. Everything was working fine until sometime around April 24 (exact date unknown). Now any
Win 7 SP1 machines I try to update will not install WMF 4.0. They installed .NET 4.5.1 without any trouble..
The digital signature on it it states it was signed Sept 27 2013 and the certificate expires 4/24/2014.
Even if we change the system clock to April 1 2014 it still will not install.. but this shouldn't matter anyway. They just can't sign new software with that certificate.. surely I can install it..
As for a log... If I run as C:\Windows\ccmcache\3>wusa.exe Windows6.1-KB2819745-x64-MultiPkg.msu /log:c:\windows\ccmcache\3\broken.txt
In the broken.txt I see:
Install Worker.01194: Operation Result Code of the installation: 0X4 HRESULT of the installation: 0X80240022 Operation
Result Code of the update:0X4 HRESULT of the update: 0X800b0101
Install Worker.01243: Failed install update Update for Windows (KB2819745)
Install Worker.01287: Exit with error code 0X800b0101 (A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.)
WINDOWS MANAGEMENT FRAMEWORK 4.0 FOR MICROSOFT OPERATING SYSTEM PRODUCTS
Windows6.1-KB2819745-x64-MultiPkg.msu
I also see this same event information in Setup event log..
I don’t know what to do here. Anyone else having this problem?

Hi,
Have you ever seen this article?
Event ID 4107 or Event ID 11 is logged in the Application log in Windows and in Windows Server
http://support.microsoft.com/kb/2328240/en-us
If you have any feedback on our support, please click
here
Alex Zhao
TechNet Community Support

Exchange Server 2013 Edge Transport Role

Dear,
I have a question regarding Exchange Server 2013 SP1 that, I have installed Edge Transport Server Role on separate box without Domain Joined. Obviously I installed Exchange CAS and Mailbox on Same box with
Domain Joined in Corporate LAN.. But my edge is placed on DMZ and it is ready with all configuration, Mailbox Server Synchronization is also installed with Edge. Means all required configuration are properly configured and it is verified. But I want clients
to OWA Access from Edge only. Because I want to restrict my internal network from the internet. So kindly provide me any possible ways to access OWA from Edge only ??. I have see some another methods like "Web Application Proxy instead of TMG because
TMG is expired"..
Kindly provide me possible ways or URL so I will configure it..
Thanks.
Fuzail (FM)

Hi,
Is there any further question on this thread?
Thanks,
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]
Simon Wu
TechNet Community Support

EdgeSync service cannot connect to this subscription because of error "No EdgeSync credentials were found for Edge transport server

When checking Edge Synchronization on our Exchange 2010 HUB server (Test-EdgeSynchronization) I get SyncStatus "Failed". I suspect this failed after we had moved all of our Exchange 2010 servers (Except the Edge server which not member
of any domain or site) to a new site.     In hopes to resolve this, I did the following:
Removed the Edge Subscription from our HUB server using the EMC.
Deleted the cert used by ADAM on our Exchange 2010 Edge server (using the Certificates MMC).
On the Exchange 2010 Edge server created a new Edge subscription file using: “New-EdgeSubscription –FileName "C:\EdgeSubscription20150424.XML"
Restarted the "Microsoft Exchange ADAM" service on our Edge server.
Copied the "EdgeSubscription20150424.XML" to our HUB server. Then completed the New Edge subscription import on our HUB server using the MMC (specifying the AD site and location/name of the XML).
After this, I still get syncstatus failed on our HUB.   Thought to check the certificate using "Get-ExchangeCertificate | FL" but that results in: "Get-ExchangeCertificate : The Exchange Certificate operation has failed
with an exception. The error message is: Access is denied".   I tried to create a new certificate on our HUB serve using "New-ExchangeCertificate", but get the exact same "Access is denied" error message
again.
I believe we never noticed that the Edge sync wasn't working because we only use our Edge server when our hardware email filter fails (Symantec Message Gateway). Our Edge server has a lower priority in our MX record and lower priority in our send connectors
on our HUB servers. The Edge server though does receive email from internal email relay from some servers for notifications. These do get delivered unless the user mailbox is new (suspect ADAM isn't updating - that's why I started looking into
this).
This should be simple!   What am I missing???   Thanks in advance for any feedback.
PS - this is my first posting here.... I apologize if I posted this in the wrong forum or category. :)

Hi PongoDog,
Thank you for your question.
By your description, we could refer to the following steps to check if issue persist:
Remove all hub servers certificate
Create a new hub server certificate with command "New-ExchangeCertificate"
Remove the edge subscription on hub & edge server
Recreate sync subscription and import it on hub server.
If the issue persist, we could Check network connectivity between the Hub Transport server and Active Directory. Use Ping to isolate network hardware problems and incompatible configurations. Use PathPing to detect packet loss over multiple-hop trips. then
run dcdiag /s:<Domain Controller Name> at a command prompt on the Exchange Server. Use the output of Dcdiag to discover the root cause of any failures or warnings that it reports. Finally Rreview the Application log for MSExchangeADAccess and MSExchange
Topology events that could provide more information about the root cause of this event and post Event ID to
[email protected] for our troubleshooting.
If there are any questions regarding this issue, please be free to let me know.
Best Regard,
Jim
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
Jim Xu
TechNet Community Support

Adding new Hub Transport server in existing environment

Hi everyone,
Currently we have 5 exchange servers 2010 :
2 CAS Servers (Virtual)
2 MB and Hub Transport servers (Physical)
1 Edge server in DMZ. (Virtual)
Now I have added 2 more servers
with MB and Hub Tranport Roles (VIRTUAL) and want to configure the mail flow from these new transport servers.
Can anyone help with the steps I should follow. Please note we have 1 existing Edge server in 2010 and email flow should be from Hub Transport to Edge server then from Edge to internet.
Existing environment is working fine without any issues. Main reason to do this is to virtualize the physical servers. Mailbox DB already migrated to new servers.
Thanks.
Manish Kumar MCSA, MCITP Enterprise Admin. MCTS Exchange server 2007, MCITP Virtualization Admin.

Dear Manish
Please find your answers below
For mail flow to happen through new hub transport I will make the new edge subscription from new HUB server
to Edge server. Is there any other changes I have to do ?
No other changes is required
Create a new edge subscription and then import it and run start endge sync
So when I will do create the new edge subscription then it will delete the old send connectors and will
create the new one?
IT will create old edge sync and create a new edge sync which will not make any impact on your config
Will there be any downtime while doing this activity ?
Better to do this on after production hours since definitely there will be mail delay and may delay more if you try this on production hours
Remember to mark as helpful if you find my contribution useful or as an answer if it does answer your question.That will encourage me - and others - to take time out to help you Check out my latest blog posts on http://exchangequery.com Thanks Sathish (MVP)

Exchange 2013 Edge Transport Replacement

Hi all,
I have a quick question regarding a new 2013 Edge Transport that I need to move to a physical machine.
It currently resides on a VM and I would like to decommission this machine, remove the edge subscription and redeploy the same configuration on a physical box.
Do you see any issues using the same name and IP with the new box? I know it says it is not supported to rename the edge, but If I remove it completely and redeploy?

Hi Scott4768,
Based on my experience, you should uninstall the EDGE server which on a VM and then re-install it on a physical box, and you could use the same IP and name.
In simple terms, the steps are following:
1. Remove-EdgeSubscription
2. uninstall EDGE server
3. re-install EDGE server on a physical box
4. Create New-EdgeSubscription
Best regards,
Eric

New Edge Transport install - required certificate?

Similar Messages

Maybe you are looking for