Outlook 2013: There is a problem with the proxy server's certificate

Hello!
One more question regarding Outlook 2013/Exchange2013SP1:
There are three lab PCs: DC, Exch1, Exchange2. There's a wildcard certificate installed on Exch1 (https://social.technet.microsoft.com/Forums/en-US/6a440c99-47bd-4f48-8cc5-9f92e6b06496/wildcard-certificate-for-exchange-2013?forum=exchangesvrgeneral).
OWA works perfect with this wildcard certificate.
I install Outlook2013 on Exch1 and get the error:
DC.Entreprise.Local is a computer certificate issued for the computer DC.Enterprise.Local.
DC.Enterprise.Local IS NOT (and never was) the proxy for Exch1 or Exchange2:
How Outlook could request DC's certificate if the proxy server = Exch1.Enterprise.Local???
Thank you in advance,
Michael

Hello all,
Thank you for your replies!
Since I'm using a wildcard certificate I changed Outlook providers according to this:
http://blogs.technet.com/b/exchange/archive/2013/08/02/part-2-reverse-proxy-for-exchange-server-2013-using-iis-arr.aspx
If you do choose to use a wildcard certificate, you should also make sure that you
change the EXPR Outlook Provider, so that Outlook Anywhere clients can successfully connect to the Exchange Server (this behavior can be a particular issue
if you have Windows XP clients). If you do not make this change then end users may continue to receive a prompt for a certificate mismatch."
...and EXCH and EXPR are both set to *.Enterprise.Local.
"I install Outlook2013 on Exch1" you mean you install Outlook on top of Exchange?"  - on the same server as Exchange, and in this case Outlook must use SCP, not DNS (the server and the client are in the same AD domain).
"Without SCP, Exchange  try DNS autodiscover lookup, first site it will try is
https://emaldomain/autodiscover/autodiscover.xml, which happen to be resolve to your domain controller."  - I think that's the case... I just don't understand why
an internal client can't find the SCP that does exist and point to exch1.enterprise.local:
Regards,
Michael

Similar Messages

  • Intermittent proxy error "There is a problem with the proxy server's security certificate. Outlook is unable to connect to the proxy server "

    Hi all,
    From time to time (at least once a day), the following message pops up on the user's screen:
    "There is a problem with the proxy server's security certificate. Outlook is unable to connect to the proxy server . Error Code 80000000)."
    If we click "OK" it goes away and everything continues to work although sometimes Outlook disconnects. It is quite annoying...
    Any ideas?
    Thank you in advance

    Hi,
    For the security alert issue, I'd like to recommend you check the name in the alert windows, and confirm if the name is in your certificate.
    Additionally, to narrow down the cause, when the Outlook client cannot connect again, I recommand you firstly check the connectivity by using Test E-mail AutoConfiguration. For more information, you can refe to the following article:
    http://social.technet.microsoft.com/Forums/en-US/54bc6b17-9b60-46a4-9dad-584836d15a02/troubleshooting-and-introduction-for-exchange-20072010-autodiscover-details-about-test-email?forum=exchangesvrgeneral
    Thanks,
    Angela Shi
    TechNet Community Support

  • There is a problem with the proxy server's security certificate. The name on the security certificate is invalid or does not match the name of the target site "Mailserver"

    Good day Guys
    First of all I am not an Exchange Expert, and I might be asking a very stupid question, but please bare with me. :) 
    While I was on leave our Mail server fell over and The company got a Specialist to help out for the time being.
    We where\are on Microsoft Exchange 2007 , which Fell over, and the specialist was able to recover as much data as he could.
    They then installed Exchange 2013 and tried to migrate everything from 2007 to 2013 and not everything migrated over.
    But the problem is, Outlook Anywhere was enable on 2007 and worked a 100% (before the disaster)
    With Exchange 2013 I get the following error message when trying to connect With Outlook 2013, using an external connection:
    "There is a problem with the proxy server's security certificate. The name on the security certificate is invalid or does not match the name of the target site "Mailserver"
    Outlook is unable to connect to the Proxy server. (Error Code 0)"
    Has anyone had the Similar when migrating over from 2007 to 2013 or is this an Issue on IIS and nothing to do with Exchange migration?
    Your assistance will be greatly appreciated.

    Hi,
    Firstly, I would suggest we use Exchange 2013 FE as the Outlook Anywhere proxy server.
    For the certificate issue, it mostly occurs because the host name that Outlook are trying to access does not match the certificate SAN. Please check with this point. If they do not match, you
    can change the host name by referring to the following article:
    https://support.microsoft.com/kb/940726/en-us?wa=wsignin1.0
    Thanks,
    Simon Wu
    TechNet Community Support

  • There is a problem with the proxy server's security certificate (internal Outlook 2013 users)

    I am receiving the above message for internal Outlook 2013 users when they open Outlook. Despite this message, Outlook is fully functional. External OA users do not see this message. We are using an SRV record for our autodiscover and pointing it to the
    name on the single cert we have. I've also already changed the outlookprovider record in Exchange. Any ideas?
    TIA!

    Hi Alceryes,
    According to the error message, Outlook is unable to connect  to the proxy server (Error Code 10),
    it seems an issue on the Certificate side.
    FLAG_CERT_CN_INVALID 0x00000010
    More details to see following KB:
    http://support.microsoft.com/kb/923575
    Would you like to tell me the reason that why you are using SRV record for Autodiscover?
    I find a FAQ on Autodisocover for your reference, hope it is helpful:
    https://social.technet.microsoft.com/Forums/office/en-US/54bc6b17-9b60-46a4-9dad-584836d15a02/troubleshooting-and-introduction-for-exchange-20072010-autodiscover-details-about-test-email?forum=exchangesvrgeneral
    Thanks
    If you have feedback for TechNet Subscriber Support, contact
    [email protected]
    Mavis Huang
    TechNet Community Support

  • Exchange 2010/Outlook 2010 Security Alert (...there is a problem with the site's security certificate.)

    I've been looking to resolve this issue for a while now and was hoping someone could help me understand my options.
    We have Exchange 2010 & Outlook 2010 in our environment. I've created a SSL cert for our ActiveSync from a reputable CA and unfortunately, as you may not be surprised, we are seeing an alert each time we open Outlook that states:
    "Security Alert; Information you exchange with this site cannot be viewed or changed by others. However, there is a problem with the site's security certificate.
    The name on the security certificate is invalid or does not match the name of the site."
    Of course my internal server name does not match my external server name. So the SSL I had created for use with OWA and ActiveSync is rejected by my internal Outlook clients.
    After doing some research I believe this is related to the Autodiscover service being configured with my internal server name and not my external name. 
    I've found some info about adding New-AutodiscoverVirtualDirectory and Set-ClientAccessServer commands and then found this article that might help.  (Configure
    Outlook Anywhere to Use Multiple SSL Certificates) but nothing is specific to my configuration and I'm concerned about what will happen to my existing configuration if this fails. 
    What happens when you run Set-ClientAccessServer? Does it retain and keep the old server config in place and add a new one or does it wipe it out? Will all of my devices need to be reconfigured?
    Same with New-AutodiscoverVirtualDirectory.  Does this simply add another virtual directory or is it going to overwrite my existing config?
    Then there is the question of whether or not any of this will actually address my issue at all.
    absolutezero273c

    Sorry.
    "[PS] C:\Windows\system32>Set-ClientAccessServer -Identity MailExt -AutoDiscoverServiceInternalUri "https://MailExt
    .contoso.com/autodiscover/autodiscover.xml"
    The operation couldn't be performed because object 'MailExt' couldn't be found on 'DomainController2.contoso.local'.
        + CategoryInfo          : NotSpecified: (0:Int32) [Set-ClientAccessServer], ManagementObjectNotFoundException
        + FullyQualifiedErrorId : 4D980455,Microsoft.Exchange.Management.SystemConfigurationTasks.SetClientAccessServer"...is the error I get.
    I've created the split zones and populated the Forward Lookup Zones as follows:
    CONTOSO.COM
    MailExt(CNAME)MailInt.contoso.local
    _tcp _autodiscover(SRV)MailExt.contoso.com
    CONTOSO.LOCAL
    MailInt(A)192.168.1.10
    MailExt(CNAME)MailInt.contoso.com
    One thing I did notice is that there isn't a _tcp _autodiscover entry for MailInt in my Forward Lookup Zones.  It was recommended that I make that entry for _tcp _autodiscover(SRV)MailExt.contoso.com in another post I read somewhere.
    I believe what I am trying to do is create a new autodiscover object as is shown here:
    I see there is a Get-ClientAccessServer & Set-ClientAccessServer command but I need to add a CAS. Does the Set-ClientAccessServer add or simply modify?
    Or would that require the New-AutodiscoverVirtualDirectory command? I read
    this page that discussed creating new virtual directories but that seemed a little risky without knowing all the ins and outs of how this service functions and to what degree this would affect the existing configuration.
    I was able to use the Set-ClientAccessServer command and change the actual internal autodiscoverUri to https://MailExt.contoso.com/autodiscover/autodiscover.xml but the name still says MailInt and I continue to get the SSL cert warnings because it is looking
    at MailInt.contoso.local.
    absolutezero273c

  • Has there been any problems with the mail server?

    Has there been any problems with the mail server? I keep getting a notice of server failure.

    Unfortunately the error message does not identify the specific server, I (as many folks do) have several, Mac, yahoo, google ect.

  • Version 3.6.6 and Internet explorer will not load sites, so I reloaded the older 3.6.3 of firefox and websites load fine. Internet Explorer still will not load. The error message corresponding with 3.6.6 was that there were problems with the proxy serve

    Upgraded to 3.6.6 and no sites loaded, error in proxy server. Internet explorer will not load either. Reloaded firefox 3.6.3 and sites load fine, but internet explorer still will not load. I was only able to connect to yahoo messenger when websites were not loading.
    == This happened ==
    Every time Firefox opened
    == I upgraded to 3.6.6

    I have a problem with Firefox loading. It will not load and it says Firefox is using a proxy that refuses connection. Check with your network administrator. How do I get Firefox to work. I've uninstalled it and reinstalled it twice. Any help would be great thanks.

  • There is a problem with the security certificate of the proxy server. Error code 18 and 38.

    Hi All,
    After several hours and a short night of sleep I'm out of ideas and hopefully someone here can help me trying to solve this one. First of all the situation:
    Exchange 2013 on a remote location with a CA-certificate.
    Outlook 2010 and 2013 on different locations, locally installed and on RDS.
    When I open Outlook on my laptop all is fine, no errors, good sync, no problem. But when I open Outlook on our Remote Desktop Servers with Outlook 2013 I'm getting errors like "There is a problem with the security certificate of the proxy server. The
    name on the security certificate is invalid or does not match the name of the site. Outlook is unable to connect to this server. (Error code 18)". Opening Outlook 2010 the message is the same, but the error code now is 38.
    After this Outlook opens and is working, there's one more error though. After a while an security warning pops up with the message: "Information you exchange with this site cannot be viewed or changed by others. However, there is a problem with the
    site's security certificate. * The security certificate was issued by a company you have not chosen to trust. View the certificate to determine whether you want to trust the certifying authority. * The security certificate is valid. * The name on the security
    certificate is invalid or does not match the name of the site."
    Strangest thing is, it is the certificate of my RDS! It isn't my valid en officially bought certificate from my mailserver. What's going on? I'm out of options, what I've tried so far (in random order):
    - restarting mailserver and AD;
    - restarting switches;
    - restarting routers;
    - restarting RDS, AD and all other servers;
    - bypassed proxyserver for RDS;
    - created a new profile;
    - checked recently installed updates;
    - checked certificate on mailserver;
    - checked RDS on a different location, working fine.
    Nothing helped, what can I do next? Please advice.
    Regards.

    Found a thread that solves half my problem (https://social.technet.microsoft.com/Forums/office/en-US/70d18244-889a-4d95-ac3f-e234672a82b2/there-is-a-problem-with-the-proxy-servers-security-certificate-error-when-starting-outlook?forum=exchangesvrclients).
    The first message can be suppressed by adding this to the Exchange config:
    set-outlookprovider -Identity EXCH -CertprincipalName msstd:webmail.domain.tld
    set-outlookprovider -Identity EXPR -CertprincipalName msstd:webmail.domain.tld
    Giving the command get-outlookprovider, gives me empty information regarding the certprinipalname. Filled
    this and after recreating the profile or deleting the ost-file I still have the second alert with the local certificate of my RDS.
    Not completely where I want to be, any help regarding the second alert is greatly appreciated!

  • Information you exchange with this site cannot be viewed or changed by others, However there is a problem with the

    Team,
    Getting below X mark for couple of users when they are using outlook.
    Information you exchange with this site cannot be viewed or changed by others, However there is a problem with the
    site's security certificate
    X- the security certificate was issued by a company you have not chosen to trust.
    view the certificate to determine whether you want to trust the certificate authority.
    we have 2 child domain namely us.com and emea.com.
    us.com users are getting a certificate pop up on outlook , but the entry on the top is showing as server.emea.com which is not belongs to us.com
    checked the certificates on us child domain cas/ht server and there are no SAN entry listed for emea.com, it was working earlier and started week back.
    any help in this matter is appreciated.
    regards
    Srinivas
    Srinivasa K

    Hi,
    According to your description, your Outlook clients on child domain us.com come across the security alert about one name of another child domain. If I misunderstand your meaning, please feel free to let me know.
    If yes, I'd like to recommend you check if there is any URL which is set with the name. Additionally, please check if there is any expired certificate.
    Thanks,
    Angela Shi
    TechNet Community Support

  • There is a problem with the Outlook database.  Your database could not be rebuilt. [-18000]

    For home use, I recently changed from Windows PC to MacBook Air.  I have an iPhone 4 which I synched without problem to the PC.  Since I have used Outlook for years on Windows and trusted advisors assured me Microsoft Office on the Mac is the same as Microsoft Office on Windows, I decided to continue using Microsoft Office.  Because I cannot get my Outlook calendar to sync reliably to iCal / iPhone and because I have found a small but meaningful number of features I use daily in Outlook Windows do not work on Outlook Mac, I have never been in so much pain!
    The latest problem is Outlook does not complete startup.  I get this error:
    There is a problem with the Outlook database.  To use the database, you must rebuild it using the Database Utility.
    I run the utility but it never completes successfully. 
    Step 1 of 5: Scannning...
    Step 2 of 5: Verifying...
    Step 3 of 5: Copying records to new database...
    Step 4 of 5: Recovering data...
    Your database could not be rebuilt. [-18000]
    I have found many articles about this problem but they all seem to assume that you can successfully start Outlook then you rebuild the database to fix data corruption in Outlook.
    What if I Outlook never completes startup?

    Here are the steps that solved the Outlook data corruption problem.
    http://answers.microsoft.com/en-us/mac/forum/macoffice2011-macoutlook/your-datab ase-could-not-be-rebuilt/5caff467-3ab2-464a-9fe6-00ad913b5f2e
    The question was:  Your database could not be rebuilt
    The key is to create a new Outlook Identity, remove the database file, then copy your data records into the new identity and use the Outlook database utility to rebuild the database.
    It's a wonderful feeling to see Outlook start up successfully after a few days of downtime!

  • Why do I get an "unable to connect - There may be a problem with the mail server or network." message from iCloud.  I have verified the settings.  I can access my iCloud account online but can't send or receive e-mail via the mail account.

    Text limits to the "Question" link prevents a full explanation:
    This is a long-time problem.  I have tried to resolve it with Apple but their "Customer Support" is merely a name.
    I can go online and access my e-mail but when I try to send or receive e-mail via iCloud through my internet server (Google fiber now but the same situation existed with my prior service), I receive "There may be a problem with the mail server or network.  Verify the settings for 'Apple Email' and try again.
    "The server returned the error:  The server 'p0-imap.mail.me.com' refused to allow a connection on port 143."
    Well, I have verified the setting and tried again and again and …
    Well, you get the idea …

    JungleTaxi Cabbie wrote:
    Csound1: iCloud: Configuring Mail with Mac OS X v10.6 or iOS 4
    Enter your Incoming Mail Server, User Name, and Password using the following settings:
    Incoming Mail Server: mail.me.com
    User Name: Your iCloud email address (excluding @me.com)
    Password: Your password
    Last Modified: Jun 27, 2013
    Maybe you should test these things before calling people out, because these settings do function perfectly well.
    iCloud is not supported on Snow Leopard or lower, why bother to mention it?
    The OP has an iCloud account, and that can not be opened without Lion or Mountain Lion (on a Mac), IOS5 or 6 (on an iPhone/iPad)
    The document I linked to is Apples documentation for iCloud on current devices,I don't care whether you believe that you know better than they do, but it will affect the people who follow your advice as it won't work
    JungleTaxi Cabbie wrote:
    Also, if you're not running Lion or Mountain Lion, there is no "Mail, Contacts & Calendars" prefpane.
    I never said that there was, perhaps you imagined it.

  • There's a problem with the recipient's mailbox. Please try resending this message.

    I have a user who cannot receive a message from a particular external sender. That senders assistant (same domain and server as the external sender with the issue) is able to forward the exact same message to my user and it arrives as it should. In
    message tracking, I can see the message came in through my smart host, through my front end and to the users mailbox server, where an NDR was generated.  We had the assistant forward us the NDR and it says:
    There's a problem with the recipient's mailbox. Please try resending this message. If the problem continues, please contact your helpdesk.
    From my 3rd party smart host/spam filter, I have a copy of the message in audit and when I forward it to myself, the same thing happens - it generates an NDR when it arrives at my Exchange mailbox server.  This makes me conclude that my end users mailbox
    isn't corrupt, rather it's something in the message header that our server doesn't like (I've seen this happen with other senders as well, but it is extremely rare and random).
    Details/facts of my environment:
    -Current production messaging system is Exchange 2003.
    -Working on Exchange 2010 co-existence.
    -This problem between this sender and us has been an issue before the introduction of Exchange 2010.
    -I'm hoping to begin end user mailbox migrations to 2010 and will have the sender try again at that time, but I still have testing to do with our voice messaging system before I can begin moving end user mailboxes.
    ....Begin redacted NDR detail....
    Remote Server returned '< #5.2.1>'
    Original message headers:
    Received: from fe.mydomain.com ([192.168.1.10]) by
     mailboxsrv.mydomain.com with Microsoft SMTPSVC(6.0.3790.4675);      Thu, 4 Sep
     2014 12:49:48 -0700
    Received: from exc2010.mydomain.com ([192.168.1.50]) by
     fe.mydomain.com with Microsoft SMTPSVC(6.0.3790.4675);        Thu, 4 Sep
     2014 12:49:47 -0700
    Received: from smtp.mydomain.com (192.168.1.49) by exch2010.mydomain.com
     (192.168.1.50) with Microsoft SMTP Server (TLS) id 14.3.210.2; Thu, 4 Sep 2014
     12:49:47 -0700
    Received: from pps.filterd (PPMail.mydomain.com [127.0.0.1])   by
     PPMail.gsblaw.com (8.14.5/8.14.5) with SMTP id s84Jkb0n023682       for
     <[email protected]>; Thu, 4 Sep 2014 12:49:47 -0700
    Received: from na01-by2-obe.outbound.protection.outlook.com
     (mail-by2on0098.outbound.protection.outlook.com [TheirIP])    by
     PPMail.gsblaw.com with ESMTP id 1p6da7h0jw-1 (version=TLSv1/SSLv3
     cipher=AES256-SHA bits=256 verify=NOT)       for <[email protected]>; Thu, 04 Sep
     2014 12:49:42 -0700
    Received: from Theirexchange.theirdomain.com (TheirinternalIP) by
     Theirexchange.theirdomain.com (TheirinternalIP) with Microsoft SMTP
     Server (TLS) id 15.0.1019.16; Thu, 4 Sep 2014 19:49:38 +0000
    Received: from Theirexchange.theirdomain.com ([10.141.86.14]) by
     Theirexchange.theirdomain.com ([TheirinternalIP]) with mapi id
     15.00.1019.015; Thu, 4 Sep 2014 19:49:38 +0000
    Content-Type: multipart/mixed;
            boundary="_000_9a166afd24964edda2d5439ba3dbe712DM2PR08MB445namprd08pro_"
    From: Mr Sender <[email protected]>
    To: My User <[email protected]>, "Another external recipient ([email protected])"
            <[email protected]>
    Subject: FW: A Subject
    Thread-Topic: A Subject
    Thread-Index: Ac/C2zn97ruwXQpoQtGNrjKOr1NckgFmNoeAAAEpQ2A=
    Date: Thu, 4 Sep 2014 19:49:37 +0000
    Message-ID: <[email protected]domain.com>
    References: <[email protected]domain.com>
     <[email protected]ET>
    In-Reply-To: <>
    Accept-Language: en-US
    Content-Language: en-US
    X-MS-Has-Attach: yes
    X-MS-TNEF-Correlator: <[email protected]domain.com>
    x-ms-exchange-transport-fromentityheader: Hosted
    x-originating-ip: [internetIP]
    x-microsoft-antispam: BCL:0;PCL:0;RULEID:;UriScan:;
    x-forefront-prvs: 0324C2C0E2
    x-forefront-antispam-report: SFV:NSPM;SFS:(10009015)(6009001)(189002)(199003)(377454003)(164054003)(64706001)(66066001)(19609705001)(15202345003)(50986999)(19300405004)(19625215002)(90102001)(80022001)(20776003)(83322001)(101416001)(99936001)(76176999)(54356999)(81542001)(21056001)(19580395003)(86362001)(4396001)(92566001)(16236675004)(85852003)(551944002)(74502001)(83072002)(87936001)(74662001)(31966008)(107886001)(81342001)(76482001)(46102001)(85306004)(105586002)(33646002)(15975445006)(99396002)(76576001)(74316001)(77982001)(79102001)(95666004)(108616004)(2656002)(106356001)(99286002)(24736002);DIR:OUT;SFP:1101;SCL:1;SRVR:DM2PR08MB446;H:DM2PR08MB445.namprd08.prod.outlook.com;FPR:;MLV:sfv;PTR:InfoNoRecords;MX:1;A:1;LANG:en;
    MIME-Version: 1.0
    X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:5.12.52,1.0.27,0.0.0000
     definitions=2014-09-04_03:2014-09-04,2014-09-04,1970-01-01 signatures=0
    X-Proofpoint-Spam-Reason: safe
    Return-Path: [email protected]
    X-OriginalArrivalTime: 04 Sep 2014 19:49:47.0046 (UTC) FILETIME=[61900460:01CFC879]

    A little more discovery...
    From my smart host/SPAM filter audit folder, I could see the message was received with a 2 meg "winmail.dat" file.  Yesterday, I had attempted redirecting the message to my own mailbox, and it bounced.  I decided to try redirecting the message
    to a 2010 mailbox, and the message arrived.  It had 3 attachments, 1 Word doc, and 2 PDF files.  So, this appears to be an encoding issue with the winmail.dat file.  Any work arounds/reasons for winmail.dat from being rejected at the mailbox
    server?  Once it made it to a 2010 mailbox/client, I was able to forward to a 2003 mailbox no problem.

  • 502 - Web server received an invalid response while acting as a gateway or proxy server. There is a problem with the page you are looking for, and it cannot be displayed. When the Web server (while acting as a gateway or proxy) contacted the upstream cont

    I am getting error while accessing url of lyncweb.domain.com, dialin.domain.com and meet.domain.com pointing to RP server.
    502 - Web server received an invalid response while acting as a gateway or proxy server.
    There is a problem with the page you are looking for, and it cannot be displayed. When the Web server (while acting as a gateway or proxy) contacted the upstream content server, it received an invalid response from the content server.
    Regards, Ganesh, MCTS, MCP, ITILV2 This posting is provided with no warranties and confers no rights. Please remember to click Mark as Answer and Vote as Helpful on posts that help you. This can be beneficial to other community members reading the thread.

    When i try with https://lyncfrontend.domain.local:4443 and https://lyncfrontend.domain.com:4443 both opens but when i open the external domain name i get certificate .
    ARR version installed is 3.0
    To throw more light on the configuration:
    Lync 2013 implemented, internal domain name is : domain.local and external domain name is : domain.com
    All servers in VMs are with 4 core processor, 24gb ram, 1TB drive.
    Frontend : Windows 2012r2 with Lync 2012 Standard Edition - 1 No (192.168.10.100)
    Edge : Windows 2012 with Lync 2012 Std - 1 No 
    (192.168.11.101 DMZ) in workgroup
    ISS ARR Reverse Proxy 3.0 : Windows 2012 with ARR and IIS configured. (192.168.11.102)
    Certificate : Internal Domain root CA for internal and External (Digicert).
    Internal Network : 192.168.10.x /24
    External Network (DMZ) : 192.168.11.x /24
    Public Firewall NAT to DMZ ip for firewall and RP server. So having two public IP facing external network.
    Edge has : sip.domain.com, webconf.domain.com, av.domain.com
    IIS ARR RP server has : lyncdiscover.domain.com, lyncweb.domain.com, meet.domain.com, dialin.domain.com
    Have created SRV record in public : _sip.tls.domain.com >5061>sip.domain.com, _sipfederationtls._tcp.domain.com>5061>sip.domain.com, _xmpp-server._tcp.domain.com>5269>sip.domain.com
    Installed frontend server using MS Lync server 2013 step by step for anyone by Matt Landis, Lync MVP.
    Internal AD Integrated DNS pointing Front-end
    Type of Record FQDN
    IP Description 
    A sip.domain.com
    192.168.10.100 Address internal Front End  or Director for internal network clients 
    A admin.domain.com
    192.168.10.100 URL Administration pool
    A DialIn.domain.com
    192.168.10.100 URL Access to Dial In 
    A meet.domain.com
    192.168.10.100 URL of Web services meeting
    A lyncdiscoverinternal.domain.com
    192.168.10.100 Register for Lync AutoDiscover service to internal users
    A lyncdiscover.domain.com
    192.168.10.100 Register for Lync AutoDiscover service to external users  
    SRV Service: _sipinternaltls Protocol: _tcp Port: 5061
    sip.domain.com Record pointer services to internal customer connections using TLS 
    External DNS pointing Edge & Proxy
    Type of Record FQDN
    IP Endpoint
    A sip.domain.com
    x.x.x.100 Edge
    A webconf.domain.com
    x.x.x.100 Edge
    A av.domain.com
    x.x.x.100 Edge
    SRV _sip._tls.domain.com
    sip.domain.com: 443 Edge
    SRV _sipfederationtls._tcp.domain.com
    sip.domain.com:5061 Edge
    A Meet.domain.com
    x.x.x.110 Reverse Proxy
    A Dialin.domain.com
    x.x.x.110 Reverse Proxy
    A lyncdiscover.domain.com
    x.x.x.110 Reverse Proxy
    A lyncweb.domain.com
    x.x.x.110 Reverse Proxy
    In IIS ARR proxy server following server farms are added and configured as per link ttp://y0av.me/2013/07/22/lync2013_iisarr/
    In proxy server had setup only following server farm : While running remote connectivity web service test : meet, dialin, lyncdiscover and lyncweb.
    The client inside works fine internally and through vpn. Login with external client also working fine. But we are getting error in MRCA as follows.
    a) While testing remote connectivity for lync getting error : The certificate couldn't be validated because SSL negotiation wasn't successful. This could have occurred as a result of a network error or because of a problem with the certificate installation.
    Certificate was installed properly.
    b) For remote web test under Lync throws error : A Web exception occurred because an HTTP 502 - BadGateway response was received from IIS7.
    HTTP Response Headers:
    Content-Length: 1477
    Content-Type: text/html
    Date: Wed, 14 May 2014 10:03:40 GMT
    Server: Microsoft-IIS/8.0
    Elapsed Time: 1300 ms.
    Regards, Ganesh, MCTS, MCP, ITILV2 This posting is provided with no warranties and confers no rights. Please remember to click Mark as Answer and Vote as Helpful on posts that help you. This can be beneficial to other community members reading the thread.

  • I just order 8 calendars from iPhoto and they came to me fine. Now I need to order two more but when I go thru the process I get a message  saying:unable to assemble calendar. There is a probleme with the photo with the file name"(Null)"   more........ .

    Would someone be able to explain to me the following issue with Iphoto?
    I ordered 8 same calendars for my soccer team and received them fine. Although a couple of pictures on it are a little off (out of focus). I need to order two more of the same calendars but when I go thru the process ireceive an error message saying:
    "Unable to to assemble  calendar" There is a problem with the photo with the file name "(Null)" The full resolution version of this photo either cannot be located or is corrupt. Please replace this photo or delete it from your calendar.
    How can  I fine this "corrupt" photo? How did it go thru with the first batch of calendars but won't go thru now?
    Thank you for your help.   

    Apply the two fixes below in order as needed:
    Fix #1
    Launch iPhoto with the Command+Option keys held down and rebuild the library.
    Since only one option can be run at a time start
    with Option #4 and then #1 as needed.
    Fix #2
    Using iPhoto Library Manager  to Rebuild Your iPhoto Library
    1 - download iPhoto Library Manager and launch.
    2 - click on the Add Library button, navigate to your Home/Pictures folder and select your iPhoto Library folder.
    3 - Now that the library is listed in the left hand pane of iPLM, click on your library and go to the File ➙ Rebuild Library menu option.
    4 - In the next  window name the new library and select the location you want it to be placed.
    5 - Click on the Create button.
    Note: This creates a new library based on the LIbraryData.xml file in the library and will recover Events, Albums, keywords, titles and comments.  However, books, calendars, cards and slideshows will be lost. The original library will be left untouched for further attempts at fixing the problem or in case the rebuilt library is not satisfactory.
    OT

  • I can not upgrade to quicktime 7.7.3 for windows vista.  Error message says there is a problem with the program installer.  Any clue as to how to get around this.

    I can not download quicktime 7.7.3 for windows vista.  The error message says that there is a problem with the windows installer.  Any clues?

    The error message says that there is a problem with the windows installer.
    What's the precise text of the message, please? (There's a few different ones I can think of that you might be getting.)

Maybe you are looking for